patrick/zephyr
1
0
Fork 0
Code Issues Pull requests Actions 8 Packages Projects Releases Wiki Activity

scripts: dts: update pyyaml version

Browse source 
The currently used PyYaml version has some vulnerabilies as
described on the pull request description. It updates to
version 6.0, removing these supply chain vulnerabily.
The OSSF Scorecard was the tool used for discovering
 these vulnerabilties.

Signed-off-by: Javan lacerda <javanlacerda@google.com>
This commit is contained in:
Javan lacerda 2024-03-27 14:01:44 +00:00 committed by Anas Nashif
parent fe5313fa61
commit dbfc1aaec6
3 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/requirements.txt
View file

@ -11,7 +11,7 @@ sphinx-copybutton
sphinx-togglebutton
# YAML validation. Used by zephyr_module.
PyYAML>=5.1
PyYAML>=6.0
pykwalify
# Used by pytest-twister-harness plugin

2
scripts/dts/python-devicetree/setup.py
View file

@ -36,7 +36,7 @@ setuptools.setup(
'Operating System :: Microsoft :: Windows',
],
install_requires=[
'PyYAML>=5.1',
'PyYAML>=6.0',
],
python_requires='>=3.6',
)

2
scripts/requirements-base.txt
View file

@ -8,7 +8,7 @@ pyelftools>=0.27
# used by dts generation to parse binding YAMLs, also used by
# twister to parse YAMLs, by west, zephyr_module,...
PyYAML>=5.1
PyYAML>=6.0
# YAML validation. Used by zephyr_module.
pykwalify