From 07ed22808d9ef83b2c79d27b271013093ec46ee8 Mon Sep 17 00:00:00 2001
From: aviavissar <aviavissar@gmail.com>
Date: Tue, 22 Sep 2026 12:45:20 +0300
Subject: [PATCH] fix(deps): switch from deprecated serde_yaml to yaml_serde
 fork #81

Co-authored-by: Cursor <cursoragent@cursor.com>
Signed-off-by: aviavissar <aviavissar@gmail.com>
---
 Cargo.lock | 20 ++++++++++----------
 Cargo.toml |  3 ++-
 2 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 71248f3b..b4edd0bf 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2673,8 +2673,8 @@ dependencies = [
  "praxis-policy-pdp-cedar-direct",
  "praxis-policy-pdp-cel",
  "praxis-policy-pdp-opa",
- "serde_yaml",
  "tokio",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2711,10 +2711,10 @@ dependencies = [
  "praxis-policy-session-valkey",
  "rustls",
  "serde_json",
- "serde_yaml",
  "tokio",
  "tower-service",
  "webpki-roots",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2739,10 +2739,10 @@ dependencies = [
  "regex",
  "serde",
  "serde_json",
- "serde_yaml",
  "thiserror",
  "tokio",
  "tracing",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2756,11 +2756,11 @@ dependencies = [
  "praxis-policy-core",
  "serde",
  "serde_json",
- "serde_yaml",
  "sha2",
  "thiserror",
  "tokio",
  "tracing",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2778,13 +2778,13 @@ dependencies = [
  "praxis-policy-orchestration",
  "serde",
  "serde_json",
- "serde_yaml",
  "thiserror",
  "tokio",
  "tokio-util",
  "tracing",
  "uuid",
  "wildmatch",
+ "yaml_serde",
  "zeroize",
 ]
 
@@ -2807,10 +2807,10 @@ dependencies = [
  "praxis-policy-apl-runtime",
  "praxis-policy-core",
  "serde_json",
- "serde_yaml",
  "stacker",
  "thiserror",
  "tokio",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2822,10 +2822,10 @@ dependencies = [
  "praxis-policy-apl-core",
  "praxis-policy-apl-runtime",
  "praxis-policy-core",
- "serde_yaml",
  "thiserror",
  "tokio",
  "tracing",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2838,8 +2838,8 @@ dependencies = [
  "praxis-policy-pdp-cedar-direct",
  "praxis-policy-pdp-cel",
  "praxis-policy-pdp-opa",
- "serde_yaml",
  "tokio",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2852,10 +2852,10 @@ dependencies = [
  "praxis-policy-core",
  "regorus",
  "serde_json",
- "serde_yaml",
  "thiserror",
  "tokio",
  "tracing",
+ "yaml_serde",
 ]
 
 [[package]]
@@ -2944,7 +2944,6 @@ dependencies = [
  "praxis-policy-apl-runtime",
  "redis",
  "serde",
- "serde_yaml",
  "sha2",
  "testcontainers",
  "testcontainers-modules",
@@ -2952,6 +2951,7 @@ dependencies = [
  "tokio",
  "tracing",
  "url",
+ "yaml_serde",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 8f4c86e8..4e843a59 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -97,7 +97,8 @@ readme = "README.md"
 tokio = { version = "1", features = ["rt", "rt-multi-thread", "sync", "time", "macros"] }
 tokio-util = { version = "0.7", features = ["rt"] }
 serde = { version = "1", features = ["derive", "rc"] }
-serde_yaml = "0.9"
+# NOTE: serde_yaml is deprecated; using yaml_serde (yaml.org maintained fork) as drop-in.
+serde_yaml = { package = "yaml_serde", version = "0.10.4" }
 serde_json = "1"
 async-trait = "0.1"
 # HTTP types only (no client, no I/O) for the `HttpTransport` seam in