|
Ran
|
Jobs
6
|
Files
11
|
Run time
1min
|
Badge
README BADGES
|
push
github
chore(deps): bump lxml from 6.0.3 to 6.1.0 (#292) Bumps [lxml](https://github.com/lxml/lxml) from 6.0.3 to 6.1.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/lxml/lxml/blob/master/CHANGES.txt">lxml's changelog</a>.</em></p> <blockquote> <h1>6.1.0 (2026-04-17)</h1> <p>This release fixes a possible external entity injection (XXE) vulnerability in <code>iterparse()</code> and the <code>ETCompatXMLParser</code>.</p> <h2>Features added</h2> <ul> <li> <p>GH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes in <code>lxml.html.defs</code>. This allows <code>lxml_html_clean</code> to pass them through. Patch by oomsveta.</p> </li> <li> <p>The default chunk size for reading from file-likes in <code>iterparse()</code> is now configurable with a new <code>chunk_size</code> argument.</p> </li> </ul> <h2>Bugs fixed</h2> <ul> <li>LP#2146291: The <code>resolve_entities</code> option was still set to <code>True</code> for <code>iterparse</code> and <code>ETCompatXMLParser</code>, allowing for external entity injection (XXE) when using these parsers without setting this option explicitly. The default was now changed to <code>'internal'</code> only (as for the normal XML and HTML parsers since lxml 5.0). Issue found by Sihao Qiu as CVE-2026-41066.</li> </ul> <h1>6.0.4 (2026-04-12)</h1> <h2>Bugs fixed</h2> <ul> <li>LP#2148019: Spurious MemoryError during namespace cleanup.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lxml/lxml/commit/43722f440"><code>43722f4</code></a> Update changelog.</li> <li><a href="https://github.com/lxml/lxml/commit/87470409b"><code>8747040</code></a> Name version of option change in docstring.</li> <li><a href="https://github.com/lxml/lxml/commit/6c36e6cef"><code>6c36e6c</code></a> Fix pypistats URL in download st... (continued)
1141 of 1195 relevant lines covered (95.48%)
5.73 hits per line
| ID | Job ID | Ran | Files | Coverage | |
|---|---|---|---|---|---|
| 1 | py3.11-ansible2.18.* - 24615718798.1 | 11 |
95.48 |
GitHub Action Run | |
| 2 | py3.11-ansible2.16.* - 24615718798.2 | 11 |
95.48 |
GitHub Action Run | |
| 3 | py3.10-ansible2.16.* - 24615718798.3 | 11 |
95.48 |
GitHub Action Run | |
| 4 | py3.12-ansible2.18.* - 24615718798.4 | 11 |
95.48 |
GitHub Action Run | |
| 5 | py3.10-ansible2.17.* - 24615718798.5 | 11 |
95.48 |
GitHub Action Run | |
| 6 | py3.11-ansible2.17.* - 24615718798.6 | 11 |
95.48 |
GitHub Action Run |
| Coverage | ∆ | File | Lines | Relevant | Covered | Missed | Hits/Line |
|---|