CARVIEW |
Select Language
HTTP/2 200
date: Sat, 19 Jul 2025 23:33:43 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, X-Requested-With,Accept-Encoding, Accept, X-Requested-With
etag: W/"4e4638b277cf53fe4ca5ccf58a4c1ec1"
cache-control: max-age=0, private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com release-assets.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com copilotprodattachments.blob.core.windows.net/github-production-copilot-attachments/ github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.githubassets.com github.com/assets-cdn/worker/ github.com/assets/ gist.github.com/assets-cdn/worker/
server: github.com
content-encoding: gzip
accept-ranges: bytes
set-cookie: _gh_sess=Z2VCGgf8BMAxXyi9or%2BQcOfJxeaVIdL%2BpaMhu5zlrQOhM0QTIup7NvwQnkPIyVziaL%2F%2BGGupc%2Fh%2BS3VcTF6m1Kp%2Bvt7VDQToV%2FelhwkpqAErITl0q%2FGalOsaCDzJ34H2Pp46t0npGDwiFKkCzy4OCsO8yMJgppil6S3o9B6SBwNW2LhtkOOr9hV7RAqTZj4AZ4ekvuEP9hkb1%2B%2Fv4zaT6%2FyF5L6yxNcJ8KbnLwbIelgBr%2Fui570jlwVjt8zi%2B%2Fy0pSNP9ZS1UhZTb%2B5XBGKNgQ%3D%3D--WJZek5LvyZjJsfL0--x8vY9M%2FZV4wBn7ePK0C3cQ%3D%3D; Path=/; HttpOnly; Secure; SameSite=Lax
set-cookie: _octo=GH1.1.1612244618.1752968022; Path=/; Domain=github.com; Expires=Sun, 19 Jul 2026 23:33:42 GMT; Secure; SameSite=Lax
set-cookie: logged_in=no; Path=/; Domain=github.com; Expires=Sun, 19 Jul 2026 23:33:42 GMT; HttpOnly; Secure; SameSite=Lax
x-github-request-id: E73C:35CC93:6F135C:8E2FA9:687C2B56
Releases · lxml/lxml · GitHub
26 Jun 14:36
22 Apr 21:57
Loading
05 Apr 17:24
Loading
09 Feb 22:28
Loading
10 Aug 14:14
Loading
12 May 21:58
Loading
02 Apr 17:12
Loading
31 Mar 03:43
Loading
28 Mar 19:34
Loading
28 Mar 19:33
Loading
Skip to content
Navigation Menu
{{ message }}
-
-
Notifications
You must be signed in to change notification settings - Fork 586
Releases: lxml/lxml
Releases · lxml/lxml
lxml-6.0.0
Compare
6.0.0 (2025-06-26) ================== Features added -------------- * GH#463: ``lxml.html.diff`` is faster and provides structurally better diffs. Original patch by Steven Fernandez. * GH#405: The factories ``Element`` and ``ElementTree`` can now be used in type hints. * GH#448: Parsing from ``memoryview`` and other buffers is supported to allow zero-copy parsing. * GH#437: ``lxml.html.builder`` was missing several HTML5 tag names. Patch by Nick Tarleton. * GH#458: ``CDATA`` can now be written into the incremental ``xmlfile()`` writer. Original patch by Lane Shaw. * A new parser option ``decompress=False`` was added that controls the automatic input decompression when using libxml2 2.15.0 or later. Disabling this option by default will effectively prevent decompression bombs when handling untrusted input. Code that depends on automatic decompression must enable this option. Note that libxml2 2.15.0 was not released yet, so this option currently has no effect but can already be used. * The set of compile time / runtime supported libxml2 feature names is available as ``etree.LIBXML_COMPILED_FEATURES`` and ``etree.LIBXML_FEATURES``. This currently includes ``catalog``, ``ftp``, ``html``, ``http``, ``iconv``, ``icu``, ``lzma``, ``regexp``, ``schematron``, ``xmlschema``, ``xpath``, ``zlib``. Bugs fixed ---------- * GH#353: Predicates in ``.find*()`` could mishandle tag indices if a default namespace is provided. Original patch by Luise K. * GH#272: The ``head`` and ``body`` properties of ``lxml.html`` elements failed if no such element was found. They now return ``None`` instead. Original patch by FVolral. * Tag names provided by code (API, not data) that are longer than ``INT_MAX`` could be truncated or mishandled in other ways. * ``.text_content()`` on ``lxml.html`` elements accidentally returned a "smart string" without additional information. It now returns a plain string. * LP#2109931: When building lxml with coverage reporting, it now disables the ``sys.monitoring`` support due to the lack of support in https://github.com/nedbat/coveragepy/issues/1790 Other changes ------------- * Support for Python < 3.8 was removed. * Parsing directly from zlib (or lzma) compressed data is now considered an optional feature in lxml. It may get removed from libxml2 at some point for security reasons (compression bombs) and is therefore no longer guaranteed to be available in lxml. As of this release, zlib support is still normally available in the binary wheels but may get disabled or removed in later (x.y.0) releases. To test the availability, use ``"zlib" in etree.LIBXML_FEATURES``. * The ``Schematron`` class is deprecated and will become non-functional in a future lxml version. The feature will soon be removed from libxml2 and stop being available. * GH#438: Wheels include the ``arm7l`` target. * GH#465: Windows wheels include the ``arm64`` target. Patch by Finn Womack. * Binary wheels use the library versions libxml2 2.14.4 and libxslt 1.1.43. Note that this disables direct HTTP and FTP support for parsing from URLs. Use Python URL request tools instead (which usually also support HTTPS). To test the availability, use ``"http" in etree.LIBXML_FEATURES``. * Windows binary wheels use the library versions libxml2 2.11.9, libxslt 1.1.39 and libiconv 1.17. They are now based on VS-2022. * Built using Cython 3.1.2. * The debug methods ``MemDebug.dump()`` and ``MemDebug.show()`` were removed completely. libxml2 2.13.0 discarded this feature.
Assets 77
- sha256:35bc626eec405f745199200ccb5c6b36f202675d204aa29bb52e27ba2b71dea8
2025-06-26T14:36:37Z - sha256:246b40f8a4aec341cbbf52617cad8ab7c888d944bfe12a6abd2b1f6cfb6f6082
2025-06-26T14:36:37Z - sha256:2793a627e95d119e9f1e19720730472f5543a6d84c50ea33313ce328d870f2dd
2025-06-26T14:36:37Z - sha256:e2030956cf4886b10be9a0285c6802e078ec2391e1dd7ff3eb509c2c95a69b76
2025-06-26T14:36:37Z - sha256:4d23854ecf381ab1facc8f353dcd9adeddef3652268ee75297c1164c987c11dc
2025-06-26T14:36:37Z - sha256:43fe5af2d590bf4691531b1d9a2495d7aab2090547eaacd224a3afec95706d76
2025-06-26T14:36:37Z - sha256:74e748012f8c19b47f7d6321ac929a9a94ee92ef12bc4298c47e8b7219b26541
2025-06-26T14:36:37Z - sha256:43cfbb7db02b30ad3926e8fceaef260ba2fb7df787e38fa2df890c1ca7966c3b
2025-06-26T14:36:37Z - sha256:34190a1ec4f1e84af256495436b2d196529c3f2094f0af80202947567fdbf2e7
2025-06-26T14:36:37Z - sha256:5967fe415b1920a3877a4195e9a2b779249630ee49ece22021c690320ff07452
2025-06-26T14:36:37Z -
2025-06-26T07:27:19Z -
2025-06-26T07:27:19Z - Loading
2 people reacted
lxml-5.4.0
Compare
5.4.0 (2025-04-22)
Bugs fixed
- LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.
(Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)
Issue found by Anatoly Katyushin, see https://bugs.launchpad.net/lxml/+bug/2107279
Assets 131
lxml-5.3.2
Compare
5.3.2 (2025-04-05) ================== This release resolves CVE-2025-24928 as described in https://gitlab.gnome.org/GNOME/libxml2/-/issues/847 Bugs fixed ---------- * Binary wheels use libxml2 2.12.10 and libxslt 1.1.42. * Binary wheels for Windows use a patched libxml2 2.11.9 and libxslt 1.1.39.
Assets 140
lxml-5.3.1
Compare
5.3.1 (2025-02-09) ================== Bugs fixed ---------- * GH#440: Some tests were adapted for libxml2 2.14.0. Patch by Nick Wellnhofer. * LP#2097175: ``DTD(external_id="…")`` erroneously required a byte string as ID value. * GH#450: ``iterparse()`` internally triggered the `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML. Other changes ------------- * GH#442: Binary wheels for macOS no longer use the linker flag ``-flat_namespace``.
Assets 140
lxml-5.3.0
Compare
5.3.0 (2024-08-10) ================== Features added -------------- * GH#421: Nested ``CDATA`` sections are no longer rejected but split on output to represent ``]]>`` correctly. Patch by Gertjan Klein. Bugs fixed ---------- * LP#2060160: Attribute values serialised differently in ``xmlfile.element()`` and ``xmlfile.write()``. * LP#2058177: The ISO-Schematron implementation could fail on unknown prefixes. Patch by David Lakin. Other changes ------------- * LP#2067707: The ``strip_cdata`` option in ``HTMLParser()`` turned out to be useless and is now deprecated. * Binary wheels use the library versions libxml2 2.12.9 and libxslt 1.1.42. * Windows binary wheels use the library versions libxml2 2.11.8 and libxslt 1.1.39. * Built with Cython 3.0.11.
Assets 140
3 people reacted
lxml-5.2.2
Compare
5.2.2 (2024-05-12)
Bugs fixed
-
GH#417: The
test_feed_parser
test could fail iflxml_html_clean
was not installed.
It is now skipped in that case. -
LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to
"core2", without SSE 4.2. -
If libxml2 uses iconv, the compile time version is available as
etree.ICONV_COMPILED_VERSION
.
Assets 140
lxml-5.2.1
Compare
5.2.1 (2024-04-02) ================== Bugs fixed ---------- * LP#2059910: The minimum CPU architecture for the Linux x86 binary wheels was set back to "core2", but with SSE 4.2 enabled. * LP#2059977: ``Element.iterfind("//absolute_path")`` failed with a ``SyntaxError`` where it should have issued a warning. * GH#416: The documentation build was using the non-standard ``which`` command. Patch by Michał Górny.
Assets 156
lxml-5.2.0
Compare
5.2.0 (2024-03-30) ================== Other changes ------------- * LP#1958539: The ``lxml.html.clean`` implementation suffered from several (only if used) security issues in the past and was now extracted into a separate library: https://github.com/fedora-python/lxml_html_clean Projects that use lxml without "lxml.html.clean" will not notice any difference, except that they won't have potentially vulnerable code installed. The module is available as an "extra" setuptools dependency "lxml[html_clean]", so that Projects that need "lxml.html.clean" will need to switch their requirements from "lxml" to "lxml[html_clean]", or install the new library themselves. * The minimum CPU architecture for the Linux x86 binary wheels was upgraded to "sandybridge" (launched 2011), and glibc 2.28 / gcc 12 (manylinux_2_28) wheels were added. * Built with Cython 3.0.10.
Assets 116
lxml-5.1.1
Compare
5.1.1
Assets 76
1 person reacted
lxml-5.0.2
Compare
5.0.2
Assets 83
Previous Next
You can’t perform that action at this time.