Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

pyyaml dependeny #1387

Closed
bbaassssiiee opened this issue Jul 15, 2018 · 7 comments
Closed

pyyaml dependeny #1387

bbaassssiiee opened this issue Jul 15, 2018 · 7 comments

Comments

@bbaassssiiee
Copy link

molecule 2.16.0 has requirement PyYAML==3.12, but you'll have pyyaml 3.13 which is incompatible.
@bbaassssiiee
Copy link
Author

https://snyk.io/vuln/SNYK-PYTHON-PYYAML-42159

@retr0h
Copy link
Contributor

retr0h commented Jul 15, 2018 •
edited

4.1 isn't released to pypi. Also, molecule doesn't execute yaml.load, we execute yaml.safe_load which appears to be safe from this issue.

@bbaassssiiee
Copy link
Author

3.13 is released, consider using:

PyYAML>=3.12

@retr0h retr0h added the v2.17 label Jul 16, 2018
@retr0h
Copy link
Contributor

retr0h commented Jul 16, 2018

See #1392

@retr0h
Copy link
Contributor

retr0h commented Jul 16, 2018

Closing.

@retr0h retr0h closed this as completed Jul 16, 2018
@JGalego
Copy link

JGalego commented May 28, 2019 •
edited

Is it safe to bump the PyYAML requirement to version 5.1?
yaml/pyyaml#207

@decentral1se
Copy link
Contributor

Hi @JGalego, we have #2064 for this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
4 participants
@retr0h @decentral1se @JGalego @bbaassssiiee