google / google/oss-fuzz

`infra/ci/requirements.txt` pins old PyYAML version that requires old Pythons

Open
#12,864 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
12.6k
Forks
2.9k
Avg merge
2d 2h
Merged PRs (30d)
62

Description

This came up on the Apache Arrow CI, where we validate that our development tree still builds properly on the OSS-Fuzz setup.

`infra/ci/requirements.txt` pins PyYAML to version 6.0.0, which is very old and doesn't install properly on Python 3.12+:
https://github.com/apache/arrow/issues/45059

It would probably be nice to bump the requirements to a more recent set of library versions.

(relatedly, it seems PyYAML isn't really being developed anymore)

Contributor guide

Open the contributing guide

Research direction

Start with infra/ci/requirements.txt and inspect the PyYAML pin in the OSS-Fuzz CI setup. Update the dependency to a version that installs on Python 3.12 and newer, then verify that the OSS-Fuzz development-tree build succeeds with the revised requirements.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
ci-cd, devops
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
50/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.