From 75eb02aca888f7b2f67254b84317b04b5f4cc84a Mon Sep 17 00:00:00 2001
From: Rushi Agrawal <rushi.agr@gmail.com>
Date: Tue, 17 Aug 2021 18:16:49 +0530
Subject: [PATCH] Fix PyYAML dependabot alert (#30)

Use appropriate version of PyYAML which has security fix

Signed-off-by: Rushi Agrawal <rushi.agr@gmail.com>
---
 dev-requirements.txt | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/dev-requirements.txt b/dev-requirements.txt
index bacd1c72..532c319f 100644
--- a/dev-requirements.txt
+++ b/dev-requirements.txt
@@ -11,10 +11,8 @@ jinja2
 numpy; python_version<"3.10"
 pandas; python_version<"3.10"
 
-# PyYAML 5.3 dropped support for Python 3.4 while
-# not amending that requirement to the package. :(
 pyyaml>=5.4; python_version>="3.6"
-pyyaml<5.3; python_version<"3.6"
+pyyaml<5.3.1; python_version<"3.6"
 
 isort
 black; python_version>="3.6"