pyyaml<4.0 is not secure

[sobolevn]

Hi, I am using your project together with safety package.

Today I have received this warning:

36333: pyyaml <4 resolved (3.12 installed)!
pyyaml before 4 uses ``yaml.load`` which has been assigned CVE-2017-18342.

Here's my dependency graph:

xenon==0.5.4
  - PyYAML [required: >=3.11,<4.0, installed: 3.12]
  - radon [required: >=2,<3, installed: 2.2.0]
    - colorama [required: >=0.3,<0.4, installed: 0.3.9]
    - flake8-polyfill [required: Any, installed: 1.0.2]
      - flake8 [required: Any, installed: 3.5.0]
        - mccabe [required: >=0.6.0,<0.7.0, installed: 0.6.1]
        - pycodestyle [required: >=2.0.0,<2.4.0, installed: 2.3.1]
        - pyflakes [required: >=1.5.0,<1.7.0, installed: 1.6.0]
    - mando [required: >=0.6,<0.7, installed: 0.6.4]
      - six [required: Any, installed: 1.11.0]
  - requests [required: >=2.0,<3.0, installed: 2.19.1]
    - certifi [required: >=2017.4.17, installed: 2018.4.16]
    - chardet [required: >=3.0.2,<3.1.0, installed: 3.0.4]
    - idna [required: >=2.5,<2.8, installed: 2.7]
    - urllib3 [required: >=1.21.1,<1.24, installed: 1.23]

Can you please update this dependency to be secure?
Do you need any help?

[rubik]

Hi, sorry for never replying. I think I missed this one. Xenon does not require that version of PyYaml anymore. In fact, we have the requirement PyYaml>=4.2b1.