Bump lxml from 5.2.2 to 5.3.0

Open dependabot[bot] opened this issue 1 year ago • 0 comments

Bumps lxml from 5.2.2 to 5.3.0.

Changelog

5.3.0 (2024-08-10)

Features added

GH#421: Nested CDATA sections are no longer rejected but split on output to represent ]]> correctly. Patch by Gertjan Klein.

Bugs fixed

LP#2060160: Attribute values serialised differently in xmlfile.element() and xmlfile.write().

LP#2058177: The ISO-Schematron implementation could fail on unknown prefixes. Patch by David Lakin.

Other changes

LP#2067707: The strip_cdata option in HTMLParser() turned out to be useless and is now deprecated.

Binary wheels use the library versions libxml2 2.12.9 and libxslt 1.1.42.

Windows binary wheels use the library versions libxml2 2.11.8 and libxslt 1.1.39.

Built with Cython 3.0.11.

Commits

475f4ab Update release date.
e356a1e Build: Add some debug output.
8345680 Build: Retry library downloads on failures.
2fe6c90 CI: Test oldest officially supported library versions again (the slightly new...
00335a1 Build: Improve download regexes.
f3da47d Prepare release of lxml 5.3.0.
3119703 Add missing global name to "all" in lxml.etree.
9de6180 Build: Upgrade cibuildwheel version also for the matrix setup.
54e36cb Build: Upgrade libxslt to latest (1.1.42).
d4f56ee Build: Slightly increase the oldest libxslt version that we test against to w...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Aug 30 '24 10:08 dependabot[bot]