40f7bfd65d
Accepting request 1306901 from home:pgajdos:libxml2
Markéta Machová2025-09-24 11:09:00 +00:00
85e23189d5
Accepting request 1306341 from devel:languages:python
Ana Guerrero2025-09-23 14:05:34 +00:00
febfe9c7c5
- update to 6.0.1: * LP#2116333: `lxml.sax._getNsTag() could fail with an exception on malformed input. * GH#467: Some test adaptations were made for libxml2 2.15. * Patch by Nick Wellnhofer. * LP2119510, GH#473: A Python compatibility test was fixed for Python 3.14+. * GH#471: Wheels for "riscv64" on recent Python versions were added. * GH#469: The wheel build no longer requires the wheel` package unconditionally. * Binary wheels use the library version libxml2 2.14.5. * Windows binary wheels continue to use a security patched library version libxml2 2.11.9.
Dirk Mueller2025-09-21 19:24:11 +00:00
ac9588e4dd
Accepting request 1294982 from devel:languages:python
Ana Guerrero2025-07-23 14:32:19 +00:00
26f1af7ef9
- Update to 6.0.0: * `lxml.html.diff is faster and provides structurally better diffs. * The factories Element and ElementTree can now be used in type hints. * Parsing from memoryview and other buffers is supported to allow zero-copy parsing. * lxml.html.builder was missing several HTML5 tag names. * CDATA can now be written into the incremental xmlfile() writer. * A new parser option decompress=False was added that controls the automatic input decompression when using libxml2 2.15.0 or later. * The set of compile time / runtime supported libxml2 feature names is available as etree.LIBXML_COMPILED_FEATURES and etree.LIBXML_FEATURES. * Predicates in .find*() could mishandle tag indices if a default namespace is provided. * The head and body properties of lxml.html elements failed if no such element was found. They now return None instead. * Tag names provided by code (API, not data) that are longer than INT_MAX could be truncated or mishandled in other ways. * .text_content() on lxml.html elements accidentally returned a "smart string" without additional information. It now returns a plain string. * Support for Python < 3.8 was removed. * Parsing directly from zlib (or lzma) compressed data is now considered an optional feature in lxml. * The Schematron class is deprecated and will become non-functional in a future lxml version. * Built using Cython 3.1.2. * The debug methods MemDebug.dump() and MemDebug.show()` were removed completely.
Steve Kowalik2025-07-22 06:13:45 +00:00
26c09de24d
- update to 5.3.2: * This release resolves CVE-2025-24928 as described in * https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 * GH#440: Some tests were adapted for libxml2 2.14.0. * LP#2097175: `DTD(external_id="…") erroneously required a byte string as ID value. * GH#450: iterparse() internally triggered the DeprecationWarning`` added in lxml 5.3.0 when parsing HTML.
Dirk Mueller2025-04-14 20:23:51 +00:00
4b6b1ff478
Accepting request 1203784 from devel:languages:python
Ana Guerrero2024-09-26 16:52:45 +00:00
ec82b5a549
Accepting request 1203593 from system:homeautomation:home-assistant:unstable
Matej Cepl2024-09-26 09:33:28 +00:00
013a55f707
Accepting request 1180847 from devel:languages:python
Ana Guerrero2024-06-17 17:27:06 +00:00
9d7d90957e
- Remove not needed patch skip-test-under-libexpat-2.6.0.patch - Update to 5.2.2: - GH#417: The test_feed_parser test could fail if lxml_html_clean was not installed. It is now skipped in that case. - LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to "core2", without SSE 4.2. - If libxml2 uses iconv, the compile time version is available as etree.ICONV_COMPILED_VERSION. - 5.2.1 - LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to "core2", but with SSE 4.2 enabled. - LP#2059977: `Element.iterfind("//absolute_path") failed with a SyntaxError where it should have issued a warning. - GH#416: The documentation build was using the non-standard which command. Patch by Michał Górny. - 5.2.0 - LP#1958539: The lxml.html.clean` implementation suffered from several (only if used) security issues in the past and was now extracted into a separate library: https://github.com/fedora-python/lxml_html_clean Projects that use lxml without "lxml.html.clean" will not notice any difference, except that they won't have potentially vulnerable code installed. The module is available as an "extra" setuptools dependency "lxml[html_clean]", so that Projects that need "lxml.html.clean" will need to switch their requirements from "lxml" to "lxml[html_clean]", or install the new library themselves. - The minimum CPU architecture for the Linux x86 binary wheels was upgraded to "sandybridge" (launched 2011), and glibc 2.28 / gcc 12 (manylinux_2_28) wheels were added.
Daniel Garcia2024-06-14 08:18:52 +00:00
1424c12036
Accepting request 1146785 from devel:languages:python
Ana Guerrero2024-02-15 19:59:35 +00:00
f7961fa66a
Accepting request 1146776 from home:dgarcia:branches:devel:languages:python:Factory
Daniel Garcia2024-02-15 10:27:06 +00:00
61900e7a88
Accepting request 1141530 from devel:languages:python
Ana Guerrero2024-01-26 21:46:34 +00:00
837840e35d
Accepting request 1141231 from home:ecsos:python
Markéta Machová2024-01-25 14:00:53 +00:00
aadda69cde
Accepting request 1138865 from devel:languages:python
Ana Guerrero2024-01-17 21:14:36 +00:00
6aa062b559
Accepting request 1138782 from system:homeautomation:home-assistant:unstable
Markéta Machová2024-01-15 13:54:41 +00:00
9ae4529353
Accepting request 1134342 from devel:languages:python
Ana Guerrero2023-12-21 22:37:50 +00:00
0d1ac9e9a0
- update to 4.9.4: * LP#2046398: Inserting/replacing an ancestor into a node's children could loop indefinitely. * LP#1980767, GH#379: `TreeBuilder.close() could fail with a TypeError` after parsing incorrect input. * LP#1522052: A file-system specific test is now optional and should no longer fail on systems that don't support it. * Built with Cython 0.29.37. - drop libxml2212-tests.patch (upstream) - remove python 2.x from testing - allow building against any libxml2 version in sle15 * Built with Cython 0.29.28. * LP#1835708: ElementInclude incorrectly rejected repeated * LP#1755825: iterwalk() failed to return the 'start' event for the initial - ElementTree.write() has a new option doctype that writes out a doctype string before the serialisation, in the same way as - GH#220: xmlfile allows switching output methods at an element - LP#1595781, GH#240: added a PyCapsule Python API and C-level API for passing externally generated libxml2 documents into - GH#244: error log entries have a new property path with an XPath expression (if known, None otherwise) that points to the - The namespace prefix mapping that can be used in ElementPath - GH#238: Character escapes were not hex-encoded in the xmlfile - GH#229: fix for externally created XML documents. strips the option values specified in form attributes but only - LP#1551797: revert previous fix for XSLT error logging as it - LP#1673355, GH#233: fromstring() html5parser failed to parse - The previously undocumented docstring option in ElementTree.write() produces a deprecation warning and will - remove patch lxml-fix-attribute-quoting.patch because it is now
Dirk Mueller2023-12-20 22:05:16 +00:00
5f9cdd27ce
Accepting request 1129127 from devel:languages:python
Ana Guerrero2023-11-27 21:42:02 +00:00
81aa3f39a0
Accepting request 1129126 from home:mcalabkova:branches:devel:languages:python:L
Markéta Machová2023-11-27 12:47:06 +00:00
a2e9358a0b
Accepting request 1109332 from devel:languages:python
Ana Guerrero2023-09-07 19:12:06 +00:00
86d5c3a954
- update to 4.9.3: * `lxml.objectify accepted non-decimal numbers like ²²² as integers. * A memory leak in lxml.html.clean` was resolved by switching to Cython 0.29.34+. * GH#348: URL checking in the HTML cleaner was improved. * GH#371, GH#373: Some regex strings were changed to raw strings to fix Python warnings. * Built with Cython 0.29.36 to adapt to changes in Python 3.12.
Dirk Mueller2023-08-13 18:55:53 +00:00
7c54268e25
Accepting request 1098714 from devel:languages:python
Ana Guerrero2023-07-17 17:22:37 +00:00
6074d27829
- Add ISO-Schematron-schema-optional.patch and remove-ISO-Schematron-schema.patch to remove non-free RNG schema file (bsc#1213351).
Matej Cepl2023-07-14 16:45:23 +00:00
b5c8430900
- Add close_file_before_test.patch, to make sure the testing data are flushed to the file (bsc#1206555).
Matej Cepl2023-01-20 16:02:18 +00:00
2e6655d043
- update to 4.9.0: * The mixin inheritance order in `lxml.html` was corrected. * Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12.
Dirk Mueller2022-06-07 21:18:16 +00:00
77aa18a220
- update to 4.8.0: * GH#337: Path-like objects are now supported throughout the API instead of just strings. * The `ElementMaker now supports QName` values as tags, which always override the default namespace of the factory. * GH#338: In lxml.objectify, the XSI float annotation "nan" and "inf" were spelled in lower case, whereas XML Schema datatypes define them as "NaN" and "INF" respectively. * Built with Cython 0.29.28.
Dirk Mueller2022-02-18 00:40:47 +00:00
b62809bfac
- update to 4.7.1: * Chunked Unicode string parsing via `parser.feed() now encodes the input data to the native UTF-8 encoding directly, instead of going through Py_UNICODE / wchar_t encoding first, which previously required duplicate recoding in most cases. * The standard namespace prefixes were mishandled during "C14N2" serialisation on Python 3. * lxml.objectify` previously accepted non-XML numbers with underscores (like "1_000") as integers or float values in Python 3.6 and later. It now adheres to the number format of the XML spec again. * LP#1939031: Static wheels of lxml now contain the header files of zlib and libiconv (in addition to the already provided headers of libxml2/libxslt/libexslt). * Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).
Dirk Mueller2022-01-10 23:12:53 +00:00
6e45e62782
- update to 4.6.5 (bsc#1193752, CVE-2021-43818): * A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script content through SVG images. * A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script content through CSS imports and other crafted constructs.
Dirk Mueller2022-01-04 16:09:19 +00:00
10a671eb87
- update to 4.6.4: * A new property `system_url was added to DTD entities. * The STATIC_* variables in setup.py` can now be passed via env vars. - remove python-lxml-test_etree.patch (upstream)
Dirk Mueller2021-11-24 21:31:05 +00:00
6ac41a3f82
- Add missing dependency on python-base for the devel subpackage.
Matej Cepl2021-06-01 19:15:28 +00:00
2bfc401fc6
Accepting request 896722 from home:pmonrealgonzalez:branches:devel:languages:python
Matej Cepl2021-06-01 16:42:05 +00:00
578f17f65c
Accepting request 883115 from devel:languages:python
Richard Brown
2021-04-08 19:02:05 +00:00
34c29f33db
- update to 4.6.3: * A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung, which allowed JavaScript to pass through. The cleaner now removes the HTML5 `formaction` attribute.
Dirk Mueller2021-04-06 01:54:45 +00:00
fa2fc0c2a7
- update to 4.6.2: * A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner now removes more sneaky "style" content. * A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner now removes more sneaky "style" content. * GH#310: `lxml.html.InputGetter supports __len__() to count the number of input fields. Patch by Aidan Woolley. * lxml.html.InputGetter has a new .items() method to ease processing all input fields. * lxml.html.InputGetter.keys() now returns the field names in document order. * GH-309: The API documentation is now generated using sphinx-apidoc. * LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes when a default namespace was defined. * TreeBuilder.close() raised AssertionError in some error cases where it should have raised XMLSyntaxError. It now raises a combined exception to keep up backwards compatibility, while switching to XMLSyntaxError` as an interface.
Dirk Mueller2021-01-24 10:59:08 +00:00
74f88011c9
- update to 4.5.2: * `Cleaner() now validates that only known configuration options can be set. * LP#1882606: Cleaner.clean_html() discarded comments and PIs regardless of the corresponding configuration option, if remove_unknown_tags` was set. * LP#1880251: Instead of globally overwriting the document loader in libxml2, lxml now sets it per parser run, which improves the interoperability with other users of libxml2 such as libxmlsec. * LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21. * The setup options "--with-xml2-config" and "--with-xslt-config" were accidentally renamed to "--xml2-config" and "--xslt-config" in 4.5.1 and are now available again.
Dirk Mueller2020-07-17 07:31:18 +00:00
3f321f2ca9
- update to 4.5.0 * A new function indent() was added to insert tail whitespace for pretty-printing an XML tree. * LP#1857794 Tail text of nodes that get removed from a document using item deletion disappeared silently instead of sticking with the node that was removed. * LP#1840234: The package version number is now available as lxml.__version__
Ondřej Súkup2020-03-05 12:47:41 +00:00
d4d99a8259
- Update to 4.4.1: * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation. * LP#1838521: The package metadata now lists the supported Python versions.
Tomáš Chvátal
2019-09-11 12:57:40 +00:00
640b73a837
- Update to 4.3.3: * Fix leak of output buffer and unclosed files in `_XSLTResultTree.write_output()`.
Tomáš Chvátal
2019-04-05 12:19:32 +00:00