chore(deps): update dependency lxml to v5.2.1
Metadata
Current evaluation
Merged PR #546 in commit e4d63c41, updating the lxml pin from 5.1.0 to 5.2.1.
Resolution: closed resolved
Reason: PR #546 was merged into main as commit e4d63c41, completing the lxml dependency upgrade to 5.2.1.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [lxml](https://lxml.de/) ([source](https://togithub.com/lxml/lxml), [changelog](https://git.launchpad.net/lxml/plain/CHANGES.txt)) | `==5.1.0` -> `==5.2.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>lxml/lxml (lxml)</summary>
### [`v5.2.1`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#521-2024-04-02)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-5.2.0...lxml-5.2.1)
\==================
## Bugs fixed
- [LP#2059910](https://togithub.com/LP/lxml/issues/2059910): The minimum CPU architecture for the Linux x86 binary wheels was set back to
"core2", but with SSE 4.2 enabled.
- [LP#2059977](https://togithub.com/LP/lxml/issues/2059977): `Element.iterfind("//absolute_path")` failed with a `SyntaxError`
where it should have issued a warning.
- [GH#416](https://togithub.com/GH/lxml/issues/416): The documentation build was using the non-standard `which` command.
Patch by Michał Górny.
### [`v5.2.0`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#520-2024-03-30)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-5.1.1...lxml-5.2.0)
\==================
## Other changes
- [LP#1958539](https://togithub.com/LP/lxml/issues/1958539): The `lxml.html.clean` implementation suffered from several (only if used)
security issues in the past and was now extracted into a separate library:
https://github.com/fedora-python/lxml_html_clean
Projects that use lxml without "lxml.html.clean" will not notice any difference,
except that they won't have potentially vulnerable code installed.
The module is available as an "extra" setuptools dependency "lxml\[html_clean]",
so that Projects that need "lxml.html.clean" will need to switch their requirements
from "lxml" to "lxml\[html_clean]", or install the new library themselves.
- The minimum CPU architecture for the Linux x86 binary wheels was upgraded to
"sandybridge" (launched 2011), and glibc 2.28 / gcc 12 (manylinux\_2\_28) wheels were added.
- Built with Cython 3.0.10.
### [`v5.1.1`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#511-2024-03-28)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-5.1.0...lxml-5.1.1)
\==================
## Bugs fixed
- [LP#2048920](https://togithub.com/LP/lxml/issues/2048920): `iterlinks()` in `lxml.html` rejected `bytes` input in 5.1.0.
- High source line numbers from the parser are no longer truncated
(up to a C `long`) when using libxml2 2.11 or later.
## Other changes
- [GH#407](https://togithub.com/GH/lxml/issues/407): A compatibility test was adapted to recent expat versions.
Patch by Miro Hrončok.
- Binary wheels use the library versions libxml2 2.12.6 and libxslt 1.1.39.
- Windows binary wheels use the library versions libxml2 2.11.7 and libxslt 1.1.39.
- Built with Cython 3.0.9.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - "every weekend" in timezone Etc/UTC.
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/rockcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #546 in commit e4d63c41, updating the lxml pin from 5.1.0 to 5.2.1. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR merged into main as commit e4d63c41, bumping the pinned lxml dependency from 5.1.0 to 5.2.1 (1 file, +1/-1). Pin later relaxed to lxml>=5.0; now on 6.1.3. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #546 as commit e4d63c41, updating the pinned lxml dependency from 5.1.0 to 5.2.1. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate dependency bump PR #546 (lxml 5.1.0 → 5.2.1) was approved and merged into main via commit e4d63c41, changing one pinned requirement line (+1/-1). | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate PR merged in commit e4d63c41, bumping the pinned lxml constraint in pyproject.toml from ==5.1.0 to ==5.2.1 (1 file, +1/-1); approved by 2 reviewers. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #546 in commit e4d63c41, updating rockcraft's lxml pin from 5.1.0 to 5.2.1. | |
| stealth/space-bunny-alpha | — | closed resolved | Renovate dependency bump PR #546 updating lxml from 5.1.0 to 5.2.1 was approved and merged into main via commit e4d63c41, changing a single pinned requirement line. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #546 in commit e4d63c41, updating the pinned lxml dependency from 5.1.0 to 5.2.1. | |
| qwen/qwen3.6-35b-a3b | — | — | Dependency update for lxml from v5.1.0 to v5.2.1 was approved by two reviewers, passed CI checks, and successfully merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Updated the lxml dependency from v5.1.0 to v5.2.1. The pull request was merged, incorporating bug fixes and security improvements from the new release. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #969 chore(deps): update dependency importlib-metadata to v5.2.0 - autoclosed | charmcraft | closed | Renovate PR #969 was autoclosed unmerged; its importlib-metadata 5.2.0 bump was superseded by PR #979, which updated directly to 6.0.0 in commit 7d3565f0. | |
| #1486 chore(deps): update bugfixes | charmcraft | merged | Merged PR #1486 as commit b6e26ca8, updating 12 pinned Python dependencies, including Jinja2 3.1.3, cryptography 41.0.7, lxml 4.9.4, and pytest 7.4.4. | |
| #542 chore(deps): update dependency twine to v5 | rockcraft | merged | Renovate dependency bump PR merging twine 4.0.2 -> 5.0.0 in the dev dependency group was approved by 2 reviewers and merged to main via squash commit 9963ae9a ('chore(deps): update dependency twine to v5 (#542)'). | |
| #1236 chore(deps): update dependency chardet to v5.2.0 | charmcraft | merged | Merged PR #1236 in commit b52c2f7f, updating chardet from 5.1.0 to 5.2.0 and adding support for running the CLI via python -m chardet. | |
| #548 chore(deps): update documentation dependencies (major) | craft-parts | merged | Merged into main in commit cd3a0078, updating Sphinx 5.3.0 to 7.2.6 and furo 2022.12.7 to 2023.9.10. | |
| #191 chore(deps): update dependency docs/sphinx-lint to v0.8.1 | craft-cli | merged | Merged PR #191 as commit 12dc061, updating docs/sphinx-lint from 0.6.8 to 0.8.1 after approval. | |
| #554 chore(deps): update dependency canonical-sphinx to v0.5.2 | fetch-service | merged | Merged canonical-sphinx 0.5.1→0.5.2 in PR #554 via commit cc548f8. | |
| #141 chore(deps): update dependency docs/sphinx-lint to v0.8.1 | starbase | merged | Renovate PR #141 was merged, updating docs/sphinx-lint from 0.6.8 to 0.8.1 in commit 62cafda. | |
| #377 chore(deps): update dependency canonical-sphinx to v0.5.1 | fetch-service | merged | Renovate PR #377 was merged, updating canonical-sphinx from 0.4.0 to 0.5.1 in commit 653a913. | |
| #368 chore(deps): update documentation dependencies | craft-providers | merged | Renovate dependency bump PR merged as commit 5eae8d4 (2023-07-28): docs/sphinx-lint 0.6.7→0.6.8 and docs/sphinx-toolbox 3.4.0→3.5.0, +2/-2 lines in the docs requirements. |