:seedling: Bump lxml from 5.4.0 to 6.0.0 by dependabot[bot] · Pull Request #2062 · operator-framework/operator-controller
Bumps lxml from 5.4.0 to 6.0.0.
Changelog
Sourced from lxml's changelog.
6.0.0 (2025-06-26)
Features added
GH#463:
lxml.html.diffis faster and provides structurally better diffs. Original patch by Steven Fernandez.GH#405: The factories
ElementandElementTreecan now be used in type hints.GH#448: Parsing from
memoryviewand other buffers is supported to allow zero-copy parsing.GH#437:
lxml.html.builderwas missing several HTML5 tag names. Patch by Nick Tarleton.GH#458:
CDATAcan now be written into the incrementalxmlfile()writer. Original patch by Lane Shaw.A new parser option
decompress=Falsewas added that controls the automatic input decompression when using libxml2 2.15.0 or later. Disabling this option by default will effectively prevent decompression bombs when handling untrusted input. Code that depends on automatic decompression must enable this option. Note that libxml2 2.15.0 was not released yet, so this option currently has no effect but can already be used.The set of compile time / runtime supported libxml2 feature names is available as
etree.LIBXML_COMPILED_FEATURESandetree.LIBXML_FEATURES. This currently includescatalog,ftp,html,http,iconv,icu,lzma,regexp,schematron,xmlschema,xpath,zlib.Bugs fixed
GH#353: Predicates in
.find*()could mishandle tag indices if a default namespace is provided. Original patch by Luise K.GH#272: The
headandbodyproperties oflxml.htmlelements failed if no such element was found. They now returnNoneinstead. Original patch by FVolral.Tag names provided by code (API, not data) that are longer than
INT_MAXcould be truncated or mishandled in other ways.
.text_content()onlxml.htmlelements accidentally returned a "smart string" without additional information. It now returns a plain string.LP#2109931: When building lxml with coverage reporting, it now disables the
sys.monitoringsupport due to the lack of support in nedbat/coveragepy#1790
... (truncated)
Commits
2a67034Prepare release of 6.0.0.e0b4e02Update changelog.d3f4dcfBuild: Upgrade libxml2 to latest 2.14.4.014e51cBuild: Add Windows arm64 wheel builds (GH-465)d3914dcOnly use "xmlCtxtIsStopped()" from libxml2 2.15.0 on since it fails to cover ...6e41390Avoid reading the deprecated "disableSAX" attribute of "xmlParserCtxt".f85da81Use newer "language_level=3" in ElementPath module.787315eBuild: bump pypa/cibuildwheel in the github-actions group (#464)fb3adb1Readme: Add project income report for 2024.8e61a75Fit cached tuple more nicely into cachelines.- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)