Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
[build-system]
requires = ["setuptools>=42", "wheel", "setuptools_scm[toml]>=3.5.0", "pybind11>=2.10.0"]
requires = ["setuptools>=42", "wheel", "setuptools_scm[toml]>=3.5.0", "pybind11>=3.0.3"]
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CMake fallback fetches outdated pybind11 v2.13.6 version

Medium Severity

The pyproject.toml build requirement now mandates pybind11>=3.0.3, but src/CMakeLists.txt line 244 has a FetchContent_Declare fallback pinned to GIT_TAG v2.13.6. If CMake can't find the pip-installed pybind11 (e.g., in certain CI or from-source builds), the fallback fetches a 2.x version that's incompatible with the 3.x minimum. This version mismatch can lead to build failures or subtle ABI incompatibilities since pybind11 3.0 is a major version with breaking changes.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 0da4501. Configure here.

build-backend = "setuptools.build_meta"

[tool.setuptools_scm]
Expand Down
Loading