Skip to content

Bump lxml from 6.1.1 to 6.1.3 - #25422

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/lxml-6.1.3
Open

Bump lxml from 6.1.1 to 6.1.3#25422
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/lxml-6.1.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps lxml from 6.1.1 to 6.1.3.

Changelog

Sourced from lxml's changelog.

6.1.3 (2026-09-02)

Bugs fixed

  • LP#2165901: External parameter entity parsing was allowed by default (with resolve_entities="internal"). Issue found by Tomer Fichman.

6.1.2 (2026-08-18)

  • GH#526: Some build files were missing in the sdist. Patch by Nicola Soranzo.

  • Some minor corrections for error handling cases.

Other changes

  • Built with Cython 3.2.9.
Commits
  • 3c1a4c7 Prepare release of 6.1.3.
  • c1191fc Update changelog.
  • 03ec312 Disable parameter entity parsing when internal-only entity parsing is requested.
  • 11d03e9 Build: Prevent duplicate Py3.8 wheel builds.
  • 9efc586 Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...
  • 9716fb1 Build: Include older PyPy versions.
  • 0f3327d Build: Exclude Win-Aarch64 from wheel build.
  • 6967c96 Build: Make all built wheels downloadable even if they don't pass the release...
  • 061218d Build: Exclude Py3.15 i686 wheels from validation (because they are intention...
  • ce9fe0d Build: Fix Py3.8 windows build.
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 10, 2026
Bumps [lxml](https://github.com/lxml/lxml) from 6.1.1 to 6.1.3.
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.3)

---
updated-dependencies:
- dependency-name: lxml
  dependency-version: 6.1.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/lxml-6.1.3 branch from e2b58b0 to 7c7a6d4 Compare September 10, 2026 14:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants