<div dir="ltr"><div><div>Well since it's been a while with no reply on this, this evening I went ahead and made the changes I proposed back in January in my own fork. This definitely seems to have solved the YAML loader problem you were originally asking about, but Linux builds are still failing, now for reasons that seem to just have to do with mismatched distro-specific dependencies. Dunno if you have an easy way to get these distros and dependencies back into a state that makes sense or if I need to dig more into manually fixing all that, though.<br><br></div>Anyway, I made the PR against jtojnar's fork that's the basis for the original PR you were asking about. My PR is here: <a href="https://github.com/jtojnar/xiphos/pull/1">https://github.com/jtojnar/xiphos/pull/1</a><br><br></div>That fork seems not to have the CI actions enabled, but mine does and you can see the build logs here: <a href="https://github.com/maxsond/xiphos/actions/runs/2099367438">https://github.com/maxsond/xiphos/actions/runs/2099367438</a></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jan 23, 2022 at 1:54 PM Daniel Maxson <<a href="mailto:vagus.eques@gmail.com">vagus.eques@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hey! Long-time lurker, first-time reply-er. It looks like this is in some way related to PyYAML deprecating directly calling load() without a Loader because of security concerns (although that was back in 2020 so I'm surprised this is only coming up now): <a href="https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation" target="_blank">https://github.com/yaml/pyyaml/wiki/PyYAML-yaml.load(input)-Deprecation</a><br><br></div><div>My proposal would be that rather than curling this build script, a build script be brought into the Xiphos project (which for consistency/ease could mean simply copying the currently curled script, which is fair game since both mate-desktop from which this script is taken and Xiphos are licensed under GPLv2) which calls yaml.load with a specific loader.
<code>FullLoader <span style="font-family:arial,sans-serif">is the default recommended by PyYAML in the documentation I linked. <br></span></code></div><div><code><span style="font-family:arial,sans-serif"><br></span></code></div><div><code><span style="font-family:arial,sans-serif">Unless (a) someone thinks this is undesirable or (b) wants to do this, I wouldn't mind taking a stab at updating the broken PR (though I'd be surprised if this doesn't come up in other places since I don't see a direct correlation between #1103's changes and this). I would plan to test against Ubuntu in WSL which should be good enough to cover what needs covering to make sure this builds for non-Windows systems.<br></span></code></div>
</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, Jan 23, 2022 at 12:51 PM Karl Kleinpaste <<a href="mailto:karl@kleinpaste.org" target="_blank">karl@kleinpaste.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div>
<font face="FreeSerif">Someone offered a simple pull request for a
dependency glitch.<br>
Failed for everything but Windows builds.<br>
Something docker-related, not part of Xiphos source.<br>
<br>
<font face="monospace">$ pwd<br>
/home/karl/src/bible/xiphos<br>
$ find -name dock*<br>
$ grep -i load .ci-build.yml<br>
curl -Ls -o gtkhtml-4.10.0.tar.xz
<a href="https://download.gnome.org/sources/gtkhtml/4.10/gtkhtml-4.10.0.tar.xz" target="_blank">https://download.gnome.org/sources/gtkhtml/4.10/gtkhtml-4.10.0.tar.xz</a><br>
$ </font><br>
<br>
Would anyone care to look?<br>
<a href="https://github.com/crosswire/xiphos/pull/1103" target="_blank">https://github.com/crosswire/xiphos/pull/1103</a><br>
<br>
<img src="cid:17e872a459987561fb21" alt=""></font>
</div>
_______________________________________________<br>
xiphos-devel mailing list<br>
<a href="mailto:xiphos-devel@crosswire.org" target="_blank">xiphos-devel@crosswire.org</a><br>
<a href="http://crosswire.org/mailman/listinfo/xiphos-devel" rel="noreferrer" target="_blank">http://crosswire.org/mailman/listinfo/xiphos-devel</a><br>
</blockquote></div>
</blockquote></div>