# The validator's only third-party import, pinned so the OSV scan in
# .github/workflows/validate.yml has an exact version to resolve. An
# unpinned `pip install pyyaml` resolves to whatever PyPI serves that
# morning, which a scan cannot check and a reader cannot reproduce.
PyYAML==6.0.3
