Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does the PyYaml dependency break Python 3.7 support when using pipenv? #409

Closed
fkromer opened this issue Oct 23, 2018 · 1 comment
Closed

Comments

@fkromer
Copy link

fkromer commented Oct 23, 2018

Does PyYaml 3.12 break bandits Python 3.7 support under some circumstances?

The Python 3.7 bandit 1.5.1 build log states installation of PyYaml 3.13.

When I try to create a Python 3.7.0 environment (bandit==1.5.1) via pipenv install --python 3.7.0 ... I get an error An error occurred while installing bandit! Will try again. whose root cause seems to be PyYaml (Failed building wheel for PyYAML).

According to lower-constraints.txt bandit 1.5.1 depends on PyYaml==3.12. The pipenv output shows Collecting PyYAML>=3.12 (from bandit->-r /tmp/pipenv-y2xrl_5w-requirements/pipenv-ds4s1gv8-requirement.txt (line 1)). The PyYaml changelog states:

3.13 (2018-07-05)

Rebuild wheels using latest Cython for Python 3.7 support.

BTW: Creating a Python 3.6.5 environment (pipenv install --python 3.6.7 ...) works fine.

@ericwb
Copy link
Member

ericwb commented Nov 27, 2018

I think you're running into this issue yaml/pyyaml#126. Probably the lower-constraints.txt should be bumped to 3.13

ericwb added a commit that referenced this issue Dec 10, 2018
The minimum version for Python 3.7 to work with PyYAML is 3.13.

See:
yaml/pyyaml#126

Fixes: #409

Signed-off-by: Eric Brown <browne@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants