Skip to content

Commit

Permalink
setup: Update pin PyYAML
Browse files Browse the repository at this point in the history
Allow the use of PyYAML 6.x with the exception of PyYAML-6.0 which has
a broken build dependency relation to Cython.

This allows migrating away from PyYAML-5.3.1 which has known security bugs[0]

[0] https://security.snyk.io/package/pip/PyYAML/5.3.1
  • Loading branch information
freyes committed Aug 9, 2023
1 parent a20d039 commit 8ec888b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion setup.py
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@
exclude=["*.tests", "*.tests.*", "tests.*", "tests"]),
install_requires=[
'cheetah3>=3.0.0,<4.0',
'pyyaml>=5.0,!=5.4.0,!=5.4.1,<6.0',
'pyyaml>=5.0,!=5.4.0,!=5.4.1,!=6.0,<7.0',
'requests>=2.0.0,<3.0.0',
'blessings<2.0',
'ruamel.yaml<0.16.0;python_version < "3.7"',
Expand Down

0 comments on commit 8ec888b

Please sign in to comment.