Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 1, 2025

Bumps xmlsec from 1.3.15 to 1.3.16.

Release notes

Sourced from xmlsec's releases.

1.3.16

Release Date: 2025-07-10 Version: 1.3.16


Compatibility and Wheel Support

This release provides binary wheels that are fully compatible with lxml v6.0.0. The compatibility is ensured by using the same underlying libxml2 version in both python-xmlsec and lxml.

Because of this strict requirement, the wheels cannot be used with versions of lxml lower than 6.0.0. Mixing versions will lead to runtime errors.

Common Error

If you see the following message:

lxml & xmlsec libxml2 library version mismatch

it indicates that the version of libxml2 used to build lxml does not match the version used to build python-xmlsec.

Recommended Solutions

  • Upgrade lxml to v6.0.0, or
  • Build both lxml and python-xmlsec manually from source using the same libxml2 version

Wheel Build Configuration

Linux and macOS Wheels

These wheels are built against the following versions, which match those used in lxml v6.0.0:

  • libxml2 v2.14.4
  • libxslt v1.1.43
  • xmlsec1 v1.3.7

Windows Binary Wheels

The Windows binary wheels were compiled using Visual Studio 2022 and include the following libraries:

  • iconv v1.18-1
  • libxml2 v2.11.9-3
  • libxslt v1.1.39
  • openssl v3.0.16.pl1
  • xmlsec v1.3.7
  • zlib v1.3.1

... (truncated)

Commits
  • 8f3d924 Fix windows wheels and add ARM support (#354)
  • 3f1dfe5 Merge pull request #353 from TomiBelan/fixci
  • 3480dd3 [pre-commit.ci] pre-commit autoupdate (#312)
  • 8f04791 [pre-commit.ci] auto fixes from pre-commit.com hooks
  • 4f21315 Fix manylinux workflow
  • 749da11 Fix macosx workflow
  • c3f3df2 Fix linuxbrew workflow
  • 9c11b8f Update wheel availability based on lxml 6.0.0
  • 7f1e1d9 Fix empty argument to ./configure
  • c63a486 Download xmlsec1 releases from GitHub
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2025
Copy link

deepsource-io bot commented Aug 1, 2025

Here's the code health analysis summary for commits 507e338..8611d44. View details on DeepSource ↗.

Analysis Summary

AnalyzerStatusSummaryLink
DeepSource Python LogoPython✅ SuccessView Check ↗

💡 If you’re a repository administrator, you can configure the quality gates from the settings.

@RafaelCenzano
Copy link
Member

@dependabot rebase

Bumps [xmlsec](https://github.com/mehcode/python-xmlsec) from 1.3.15 to 1.3.16.
- [Release notes](https://github.com/mehcode/python-xmlsec/releases)
- [Commits](xmlsec/python-xmlsec@1.3.15...1.3.16)

---
updated-dependencies:
- dependency-name: xmlsec
  dependency-version: 1.3.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/xmlsec-1.3.16 branch from 1d41405 to 8611d44 Compare August 2, 2025 01:35
@RafaelCenzano RafaelCenzano merged commit 2a765f4 into main Aug 2, 2025
3 of 4 checks passed
@dependabot dependabot bot deleted the dependabot/pip/xmlsec-1.3.16 branch August 2, 2025 01:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant