Currently the cilium project has a direct dependency on the gopkg.in/yaml.v3 (go-yaml/yaml) and sigs.k8s.io/yaml (kubernetes-sigs/yaml) YAML libraries.

gopkg.in/yaml.v3 (go-yaml/yaml) is officially unmaintained and its repository is now archived (see go-yaml/yaml@944c86a).

There are multiple possible alternatives, such as goccy/go-yaml and kubernetes-sigs/yaml. They may no all be a drop in replacement for the existing gopkg.in/yaml.v3.

• goccy/go-yaml is a more modern and feature rich YAML library than go-yaml/yaml.
• kubernetes-sigs/yaml is an actively maintained fork of the now unmaintained ghodss/yaml which itself is a wrapper around the unmaintained go-yaml/yaml. kubernetes-sigs/yaml is already a cilium dependency.

Do we want to move away from depending on the now unmaintained go-yaml/yaml library and if so, which alternative library do we want to use instead?

cc: @cilium/vendor