What the developer wrote
Authored by fanquake
ci: use pyzmq over zmq
zmq seems to be an alias for pyzmq, and the project page,
https://pypi.org/project/zmq/, states "You are probably looking for
pyzmq.". So switch to pyzmq, which is what we document, and use in all
other jobs.
What changed, and why it matters
This is a one-line change to a Bitcoin Core CI (continuous integration) script for macOS. It swaps the Python package name 'zmq' for 'pyzmq' when installing test dependencies. The project page for 'zmq' on PyPI says it is effectively an alias for 'pyzmq' and recommends using 'pyzmq'. This is a routine build/test maintenance fix with no apparent security relevance.
No security action required. Treat as normal CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit modifies ci/test/00_setup_env_mac_native.sh, changing the PIP_PACKAGES environment variable from ‘pycapnp zmq’ to ‘pycapnp pyzmq’. The ‘zmq’ package on PyPI is described as a placeholder/alias for ‘pyzmq’, and Bitcoin Core already documents and uses ‘pyzmq’ elsewhere. The change aligns the macOS native CI job with other jobs and avoids relying on the alias package. It does not alter runtime code, consensus logic, networking, or wallet behavior.
Changed components
ci/test/00_setup_env_mac_native.shInspect captured patch +1 / −1
diff --git a/ci/test/00_setup_env_mac_native.sh b/ci/test/00_setup_env_mac_native.sh
index a9b4d5c8..d59c5ae6 100755
--- a/ci/test/00_setup_env_mac_native.sh
+++ b/ci/test/00_setup_env_mac_native.sh
@@ -7,7 +7,7 @@
export LC_ALL=C.UTF-8
export CONTAINER_NAME="ci_mac_native" # macos does not use a container, but the env var is needed for logging
-export PIP_PACKAGES="--break-system-packages pycapnp zmq"
+export PIP_PACKAGES="--break-system-packages pycapnp pyzmq"
export GOAL="install deploy"
export CMAKE_GENERATOR="Ninja"
export CI_OS_NAME="macos"
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.