chore(deps): update dependency lxml to v5.2.1
Metadata
Current evaluation
Dependency update for lxml from v5.1.0 to v5.2.1 was approved by two reviewers, passed CI checks, and successfully merged.
Suggested action: —
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [lxml](https://lxml.de/) ([source](https://togithub.com/lxml/lxml), [changelog](https://git.launchpad.net/lxml/plain/CHANGES.txt)) | `==5.1.0` -> `==5.2.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>lxml/lxml (lxml)</summary>
### [`v5.2.1`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#521-2024-04-02)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-5.2.0...lxml-5.2.1)
\==================
## Bugs fixed
- [LP#2059910](https://togithub.com/LP/lxml/issues/2059910): The minimum CPU architecture for the Linux x86 binary wheels was set back to
"core2", but with SSE 4.2 enabled.
- [LP#2059977](https://togithub.com/LP/lxml/issues/2059977): `Element.iterfind("//absolute_path")` failed with a `SyntaxError`
where it should have issued a warning.
- [GH#416](https://togithub.com/GH/lxml/issues/416): The documentation build was using the non-standard `which` command.
Patch by Michał Górny.
### [`v5.2.0`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#520-2024-03-30)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-5.1.1...lxml-5.2.0)
\==================
## Other changes
- [LP#1958539](https://togithub.com/LP/lxml/issues/1958539): The `lxml.html.clean` implementation suffered from several (only if used)
security issues in the past and was now extracted into a separate library:
https://github.com/fedora-python/lxml_html_clean
Projects that use lxml without "lxml.html.clean" will not notice any difference,
except that they won't have potentially vulnerable code installed.
The module is available as an "extra" setuptools dependency "lxml\[html_clean]",
so that Projects that need "lxml.html.clean" will need to switch their requirements
from "lxml" to "lxml\[html_clean]", or install the new library themselves.
- The minimum CPU architecture for the Linux x86 binary wheels was upgraded to
"sandybridge" (launched 2011), and glibc 2.28 / gcc 12 (manylinux\_2\_28) wheels were added.
- Built with Cython 3.0.10.
### [`v5.1.1`](https://togithub.com/lxml/lxml/blob/HEAD/CHANGES.txt#511-2024-03-28)
[Compare Source](https://togithub.com/lxml/lxml/compare/lxml-5.1.0...lxml-5.1.1)
\==================
## Bugs fixed
- [LP#2048920](https://togithub.com/LP/lxml/issues/2048920): `iterlinks()` in `lxml.html` rejected `bytes` input in 5.1.0.
- High source line numbers from the parser are no longer truncated
(up to a C `long`) when using libxml2 2.11 or later.
## Other changes
- [GH#407](https://togithub.com/GH/lxml/issues/407): A compatibility test was adapted to recent expat versions.
Patch by Miro Hrončok.
- Binary wheels use the library versions libxml2 2.12.6 and libxslt 1.1.39.
- Windows binary wheels use the library versions libxml2 2.11.7 and libxslt 1.1.39.
- Built with Cython 3.0.9.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - "every weekend" in timezone Etc/UTC.
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/rockcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Dependency update for lxml from v5.1.0 to v5.2.1 was approved by two reviewers, passed CI checks, and successfully merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Updated the lxml dependency from v5.1.0 to v5.2.1. The pull request was merged, incorporating bug fixes and security improvements from the new release. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged automated dependency update upgrading lxml from v5.1.0 to v5.2.1 via Renovate bot. The update includes bug fixes, security improvements, and updated binary wheels for newer CPU architectures and glibc versions. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #542 chore(deps): update dependency twine to v5 | rockcraft | merged | Dependency twine updated from v4.0.2 to v5.0.0. Approved by two reviewers, passed CI checks, and merged into the main branch. | |
| #171 chore(deps): update dependency dev/pytest-cov to v5 | craft-store | merged | Automated dependency update for pytest-cov from v4.1.0 to v5.0.0 was approved by two reviewers, passed CI checks, and successfully merged. | |
| #1236 chore(deps): update dependency chardet to v5.2.0 | charmcraft | merged | Merged automated dependency update upgrading chardet from v5.1.0 to v5.2.0. Approved by two reviewers, passed CI checks, and modified a single file with a one-line change. | |
| #287 chore(deps): update dependency dev/pytest-cov to v5 | craft-application | merged | Merged automated dependency update for dev/pytest-cov from v4.1.0 to v5.0.0. Approved by two reviewers, passed CI checks, and modified a single file with one line change. | |
| #195 chore(deps): update dependency dev/pytest-cov to v5 | starbase | merged | Merged automated dependency update for dev/pytest-cov from v4.1 to v5.0. Approved by reviewers, passed CI checks, and integrated into the main branch. | |
| #1486 chore(deps): update bugfixes | charmcraft | merged | Merged automated dependency updates via Renovate bot. Twelve Python packages, including pytest and lxml, were upgraded to latest patch versions. Approved by two reviewers, passed CI, and merged automatically. | |
| #1289 chore(deps): update dependencies | charmcraft | merged | Approved by two reviewers and merged, the dependency update modified three files with 45 additions and 34 deletions to refresh project packages. | |
| #245 chore(deps): update dependency dev/pytest-cov to v5 | craft-cli | merged | Merged automated dependency update upgrading dev/pytest-cov from v4.1.0 to v5.0.0. Approved by two reviewers, passed CI checks, and applied with minimal configuration changes. | |
| #1618 chore(deps): update dependency pytest-cov to v5 | charmcraft | merged | Merged automated dependency update for pytest-cov to v5. Approved by two reviewers with passing CI checks. Updated one dependency configuration line. | |
| #362 build(deps): bump lxml | craft-store | merged | Merged dependency update bumping lxml from 5.4.0 to 6.1.0 to address an OSV security vulnerability. Approved by two reviewers with all CI checks passing. |