The compile step has the network enabled to allow to download pybind11 at compile time. This will bypass standard bitbake fetching and dependency resolution and brings in an arbritary version of said package.
Additionally the recipe pollutes the build host wit a call to git config --global