Wow I thought I was not affected by the PyYAML uncapped Cython disaster https://github.com/yaml/pyyaml/issues/601 but it turns out I can't install `docker-compose`.
I often refer to @henryiii blog post on the matter https://iscinumpy.dev/post/bound-version-constraints/ but I think in this case it was a big mistake not to cap Cython. In the end, build dependencies are throwaway dependencies, they are used in a temporary, isolated environment and then never used again.