What the developer wrote
Authored by Lakshya Singh
fix: macOS for grpico-tools
add openssl installation and flags to install grpcio-tools
What changed, and why it matters
This commit is a routine fix for the macOS CI build workflow. It adds Python 3.10 setup, installs OpenSSL via Homebrew, and sets environment variables so that the grpcio-tools Python package can be built successfully on macOS runners. There is no indication this change affects shipped software security or introduces a vulnerability.
No security action required. Treat as normal CI maintenance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change modifies .github/workflows/macos.yaml to: (1) add an explicit actions/setup-python@v5 step for Python 3.10, (2) add openssl to the Homebrew install list, (3) remove python@3.10 from the brew install list (now handled by setup-python), and (4) export GRPC_PYTHON_BUILD_SYSTEM_OPENSSL=1 and GRPC_PYTHON_BUILD_SYSTEM_ZLIB=1 before running uv sync. These variables tell grpcio’s build to use the system OpenSSL/Zlib instead of bundled copies, resolving a build issue referenced by grpc/grpc#31737. This is a CI/build-configuration-only change.
Changed components
.github/workflows/macos.yamlInspect captured patch +9 / −1
diff --git a/.github/workflows/macos.yaml b/.github/workflows/macos.yaml
index b4132b6a..99f8a3dc 100644
--- a/.github/workflows/macos.yaml
+++ b/.github/workflows/macos.yaml
@@ -25,6 +25,11 @@ jobs:
sudo mv bitcoin-${BITCOIND_VERSION}/bin/* /usr/local/bin
rm -rf bitcoin-${BITCOIND_VERSION}-${TARGET_ARCH}.tar.gz bitcoin-${BITCOIND_VERSION}
+ - name: Set up Python 3.10
+ uses: actions/setup-python@v5
+ with:
+ python-version: "3.10"
+
- name: Install uv
uses: astral-sh/setup-uv@v5
@@ -32,8 +37,11 @@ jobs:
run: |
export PATH="/usr/local/opt:/Users/runner/.local/bin:/opt/homebrew/bin/python3.10/bin:$PATH"
- brew install gnu-sed python@3.10 autoconf automake libtool protobuf
+ brew install gnu-sed autoconf automake libtool protobuf openssl
+ # https://github.com/grpc/grpc/issues/31737#issuecomment-1323796842
+ export GRPC_PYTHON_BUILD_SYSTEM_OPENSSL=1
+ export GRPC_PYTHON_BUILD_SYSTEM_ZLIB=1
uv sync --all-groups
- name: Build and install CLN
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.