feat: use the more maintained YAML parsing lib at https://github.com/goccy/go-yaml

https://github.com/go-yaml/yaml has several issues pending and it appers
that it is no longer maintained.

e.g.: mikefarah/yq#2294

The general recommendation is to switch to a more maintained YAML parser
implementation.

CHANGELOG:
- [ ] Switch to https://github.com/goccy/go-yaml since it is maintained

Author: yesudeep

go/dotprompt/parse.go

@@ -22,7 +22,7 @@ import (
 	"slices"
 	"strings"
 
-	"gopkg.in/yaml.v3"
+	"github.com/goccy/go-yaml"
 )
 
 // MessageSource is a message with a source string and optional content and
@@ -244,7 +244,18 @@ func ParseDocument(source string) (ParsedPrompt, error) {
 
 	if frontmatter != "" {
 		var parsedMetadata map[string]any
-		err := yaml.Unmarshal([]byte(frontmatter), &parsedMetadata)
+		// The github.com/goccy/go-yaml library can panic on certain malformed YAML
+		// so we need to use a custom error handler to recover from panics
+		var err error
+		func() {
+			defer func() {
+				if r := recover(); r != nil {
+					err = fmt.Errorf("panic while parsing YAML: %v", r)
+				}
+			}()
+			err = yaml.Unmarshal([]byte(frontmatter), &parsedMetadata)
+		}()
+
 		if err != nil {
 			fmt.Printf("Dotprompt: Error parsing YAML frontmatter: %v\n", err)
 			// Return a basic ParsedPrompt with just the template

go/dotprompt/test/spec_parser_func.go

@@ -20,9 +20,9 @@ import (
 	"fmt"
 	"testing"
 
+	"github.com/goccy/go-yaml"
 	dp "github.com/google/dotprompt/go/dotprompt"
 	"github.com/invopop/jsonschema"
-	"gopkg.in/yaml.v3"
 )
 
 // convertToSpecSuite converts the YAML content into a slice of SpecSuite objects.

go/go.mod

@@ -2,12 +2,13 @@ module github.com/google/dotprompt/go
 
 go 1.22.0
 
+toolchain go1.24.1
+
 require (
 	github.com/aymerick/raymond v2.0.2+incompatible
 	github.com/go-viper/mapstructure/v2 v2.2.1
+	github.com/goccy/go-yaml v1.16.0
 	github.com/stretchr/testify v1.10.0
-	gopkg.in/yaml.v2 v2.4.0 // indirect
-	gopkg.in/yaml.v3 v3.0.1
 )
 
 require (
@@ -22,4 +23,6 @@ require (
 	github.com/bahlo/generic-list-go v0.2.0 // indirect
 	github.com/buger/jsonparser v1.1.1 // indirect
 	github.com/mailru/easyjson v0.9.0 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )

go/go.sum

@@ -8,6 +8,8 @@ github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/go-viper/mapstructure/v2 v2.2.1 h1:ZAaOCxANMuZx5RCeg0mBdEZk7DZasvvZIxtHqx8aGss=
 github.com/go-viper/mapstructure/v2 v2.2.1/go.mod h1:oJDH3BJKyqBA2TXFhDsKDGDTlndYOZ6rGS0BRZIxGhM=
+github.com/goccy/go-yaml v1.16.0 h1:d7m1G7A0t+logajVtklHfDYJs2Et9g3gHwdBNNFou0w=
+github.com/goccy/go-yaml v1.16.0/go.mod h1:XBurs7gK8ATbW4ZPGKgcbrY1Br56PdM69F7LkFRi1kA=
 github.com/invopop/jsonschema v0.13.0 h1:KvpoAJWEjR3uD9Kbm2HWJmqsEaHt8lBUpd0qHcIi21E=
 github.com/invopop/jsonschema v0.13.0/go.mod h1:ffZ5Km5SWWRAIN6wbDXItl95euhFz2uON45H2qjYt+0=
 github.com/mailru/easyjson v0.9.0 h1:PrnmzHw7262yW8sTBwxi1PdJA3Iw/EKBa8psRf7d9a4=