Skip to content

Commit 42fb0c1

Browse files
hbrodinclaude
andauthored
build(deps): pin protobuf to 3.20.3 in fuzzer_runner for OSS-Fuzz compatibility (#456)
Add uv constraint-dependencies to prevent protobuf from being updated beyond 3.20.3, which is required for compatibility with OSS-Fuzz infrastructure. This prevents dependabot from creating PRs like #453 that would break the fuzzer runner. Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
1 parent 594748a commit 42fb0c1

File tree

2 files changed

+8
-0
lines changed

2 files changed

+8
-0
lines changed

fuzzer_runner/pyproject.toml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,11 @@ packages = ["src/buttercup"]
2525
requires = ["hatchling"]
2626
build-backend = "hatchling.build"
2727

28+
[tool.uv]
29+
# Must match OSS-Fuzz protobuf version for compatibility
30+
# See: https://github.com/google/oss-fuzz/blob/master/infra/base-images/base-builder/Dockerfile
31+
constraint-dependencies = ["protobuf==3.20.3"]
32+
2833
[tool.uv.sources]
2934
common = { path = "../common", editable = true }
3035

fuzzer_runner/uv.lock

Lines changed: 3 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)