Changelog for python39-lxml-4.9.1-1.2.x86_64.rpm :

* Mon Sep 19 2022 Matej Cepl - Update BR for libxml2-devel to the current version.- Add missing BR for python-base.
* Sat Jul 09 2022 Arun Persaud - update to version 4.9.1 (bsc#1201253, CVE-2022-2309):
* Bugs fixed + A crash was resolved when using iterwalk() (or canonicalize()) after parsing certain incorrect input. Note that iterwalk() can crash on valid input parsed with the same parser after failing to parse the incorrect input.
* Tue Jun 07 2022 Dirk Müller - update to 4.9.0:
* The mixin inheritance order in ``lxml.html`` was corrected.
* Built with Cython 0.29.30 to adapt to changes in Python 3.11 and 3.12.
* Fri Feb 18 2022 Dirk Müller - update to 4.8.0:
* GH#337: Path-like objects are now supported throughout the API instead of just strings.
* The ``ElementMaker`` now supports ``QName`` values as tags, which always override the default namespace of the factory.
* GH#338: In lxml.objectify, the XSI float annotation \"nan\" and \"inf\" were spelled in lower case, whereas XML Schema datatypes define them as \"NaN\" and \"INF\" respectively.
* Built with Cython 0.29.28.
* Mon Jan 10 2022 Dirk Müller - update to 4.7.1:
* Chunked Unicode string parsing via ``parser.feed()`` now encodes the input data to the native UTF-8 encoding directly, instead of going through ``Py_UNICODE`` / ``wchar_t`` encoding first, which previously required duplicate recoding in most cases.
* The standard namespace prefixes were mishandled during \"C14N2\" serialisation on Python 3.
* ``lxml.objectify`` previously accepted non-XML numbers with underscores (like \"1_000\") as integers or float values in Python 3.6 and later. It now adheres to the number format of the XML spec again.
* LP#1939031: Static wheels of lxml now contain the header files of zlib and libiconv (in addition to the already provided headers of libxml2/libxslt/libexslt).
* Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).
* Tue Jan 04 2022 Dirk Müller - update to 4.6.5 (bsc#1193752, CVE-2021-43818):
* A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script content through SVG images.
* A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script content through CSS imports and other crafted constructs.
* Wed Nov 24 2021 Dirk Müller - update to 4.6.4:
* A new property ``system_url`` was added to DTD entities.
* The ``STATIC_
*`` variables in ``setup.py`` can now be passed via env vars.- remove python-lxml-test_etree.patch (upstream)
* Tue Jun 01 2021 Matej Cepl - Add missing dependency on python-base for the devel subpackage.
* Tue Jun 01 2021 Pedro Monreal - Adapt test_etree.py to a behavioural change in libxml2 2.9.11+
* Add python-lxml-test_etree.patch
* Tue Apr 06 2021 Dirk Müller - update to 4.6.3:
* A vulnerability (CVE-2021-28957) was discovered in the HTML Cleaner by Kevin Chung, which allowed JavaScript to pass through. The cleaner now removes the HTML5 ``formaction`` attribute.
* Sun Jan 24 2021 Dirk Müller - update to 4.6.2:
* A vulnerability (CVE-2020-27783) was discovered in the HTML Cleaner by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner now removes more sneaky \"style\" content.
* A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner now removes more sneaky \"style\" content.
* GH#310: ``lxml.html.InputGetter`` supports ``__len__()`` to count the number of input fields. Patch by Aidan Woolley.
* ``lxml.html.InputGetter`` has a new ``.items()`` method to ease processing all input fields.
* ``lxml.html.InputGetter.keys()`` now returns the field names in document order.
* GH-309: The API documentation is now generated using ``sphinx-apidoc``.
* LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes when a default namespace was defined.
* ``TreeBuilder.close()`` raised ``AssertionError`` in some error cases where it should have raised ``XMLSyntaxError``. It now raises a combined exception to keep up backwards compatibility, while switching to ``XMLSyntaxError`` as an interface.
* Fri Jul 17 2020 Dirk Mueller - update to 4.5.2:
* ``Cleaner()`` now validates that only known configuration options can be set.
* LP#1882606: ``Cleaner.clean_html()`` discarded comments and PIs regardless of the corresponding configuration option, if ``remove_unknown_tags`` was set.
* LP#1880251: Instead of globally overwriting the document loader in libxml2, lxml now sets it per parser run, which improves the interoperability with other users of libxml2 such as libxmlsec.
* LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
* The setup options \"--with-xml2-config\" and \"--with-xslt-config\" were accidentally renamed to \"--xml2-config\" and \"--xslt-config\" in 4.5.1 and are now available again.
* Tue Jun 02 2020 Antonio Larrosa - Update to 4.5.1
* LP#1570388: Fix failures when serialising documents larger than 2GB in some cases.
* LP#1865141, GH#298: QName values were not accepted by the el.iter() method. Patch by xmo-odoo.
* LP#1863413, GH#297: The build failed to detect libraries on Linux that are only configured via pkg-config.
* Tue May 12 2020 Matej Cepl - Remove explicit Provides of python-doc, which is just wrong.
* Thu Mar 05 2020 Ondřej Súkup - update to 4.5.0
* A new function indent() was added to insert tail whitespace for pretty-printing an XML tree.
* LP#1857794 Tail text of nodes that get removed from a document using item deletion disappeared silently instead of sticking with the node that was removed.
* LP#1840234: The package version number is now available as lxml.__version__
* Wed Jan 22 2020 Martin Sirringhaus - Update to 4.4.2:
* LP#1835708: ElementInclude incorrectly rejected repeated non-recursive includes as recursive.
* Remove patch lxml-libxml-2.9.10.patch which is now upstream
* Sun Nov 17 2019 Dominique Leuenberger - Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.
* Wed Sep 11 2019 Tomáš Chvátal - Update to 4.4.1:
* LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
* LP#1838521: The package metadata now lists the supported Python versions.
* Thu Aug 01 2019 pgajdosAATTsuse.com- version update to 4.4.0
* ``Element.clear()`` accepts a new keyword argument ``keep_tail=True`` to clear everything but the tail text. This is helpful in some document-style use cases.
* When creating attributes or namespaces from a dict in Python 3.6+, lxml now preserves the original insertion order of that dict, instead of always sorting the items by name. A similar change was made for ElementTree in CPython 3.8. See https://bugs.python.org/issue34160
* Integer elements in ``lxml.objectify`` implement the ``__index__()`` special method.
* GH#269: Read-only elements in XSLT were missing the ``nsmap`` property. Original patch by Jan Pazdziora.
* ElementInclude can now restrict the maximum inclusion depth via a ``max_depth`` argument to prevent content explosion. It is limited to 6 by default.
* The ``target`` object of the XMLParser can have ``start_ns()`` and ``end_ns()`` callback methods to listen to namespace declarations.
* The ``TreeBuilder`` has new arguments ``comment_factory`` and ``pi_factory`` to pass factories for creating comments and processing instructions, as well as flag arguments ``insert_comments`` and ``insert_pis`` to discard them from the tree when set to false.
* A `C14N 2.0 `_ implementation was added as ``etree.canonicalize()``, a corresponding ``C14NWriterTarget`` class, and a ``c14n2`` serialisation method.
* bugfixes, see CHANGES.txt- deleted sources - lxmldoc-4.3.3.pdf (renamed)- added sources + lxmldoc-4.4.0.pdf + world.txt
* Mon Jul 22 2019 Todd R - Update to 4.3.4
* Rebuilt with Cython 0.29.10 to support Python 3.8. Note: documentation is not updated
* Tue Jul 02 2019 Tomáš Chvátal - Remove generated files
* Fri Apr 05 2019 Tomáš Chvátal - Update to 4.3.3:
* Fix leak of output buffer and unclosed files in ``_XSLTResultTree.write_output()``.
* Tue Mar 05 2019 Tomáš Chvátal - Update to 4.3.2:
* Crash in 4.3.1 when appending a child subtree with certain text nodes.
* Thu Feb 14 2019 John Vandenberg - Update to v4.3.1
* Fixed crash when appending a child subtree that contains unsubstituted entity references- from v4.3.0
* Features + The module ``lxml.sax`` is compiled using Cython in order to speed it up. + lxml.sax.ElementTreeProducer now preserves the namespace prefixes. If two prefixes point to the same URI, the first prefix in alphabetical order is used. + Updated ISO-Schematron implementation to 2013 version (now MIT licensed) and the corresponding schema to the 2016 version (with optional \"properties\").
* Other + Support for Python 2.6 and 3.3 was removed. + The minimum dependency versions were raised to libxml2 2.9.2 and libxslt 1.1.27, which were released in 2014 and 2012 respectively.- from v4.2.6
* Fix a DeprecationWarning in Py3.7+.
* Import warnings in Python 3.6+ were resolved.- Remove no longer needed 0001-Make-test-more-resilient-against-changes-in-latest-l.patch
* Tue Dec 04 2018 Matej Cepl - Remove superfluous devel dependency for noarch package
* Fri Nov 16 2018 Todd R - Update to 4.2.5
* Javascript URLs that used URL escaping were not removed by the HTML cleaner. Security problem found by Omar Eissa.
* Mon Sep 03 2018 comurphyAATTsuse.com- Fix threading tests patch for 42.3
* Add 0001-Make-test-more-resilient-against-changes-in-latest-l.patch
* Remove python-lxml-assert.patch
* Tue Aug 07 2018 toddrme2178AATTgmail.com- Update to 4.2.4 (2018-08-03) + Features added
* GH#259: Allow using ``pkg-config`` for build configuration. Patch by Patrick Griffis. + Bugs fixed
* LP#1773749, GH#268: Crash when moving an element to another document with ``Element.insert()``. Patch by Alexander Weggerle.- Update to 4.2.3 + Bugs fixed
* Reverted GH#265: lxml links against zlib as a shared library again.- Update to 4.2.2 + Bugs fixed
* GH#266: Fix sporadic crash during GC when parse-time schema validation is used and the parser participates in a reference cycle. Original patch by Julien Greard.
* GH#265: lxml no longer links against zlib as a shared library, only on static builds. Patch by Nehal J Wani.
* Wed Mar 28 2018 hpjAATTurpla.net- Version update to 4.2.1:
* LP#1755825: iterwalk() failed to return the \'start\' event for the initial element if a tag selector is used.
* LP#1756314: Failure to import 4.2.0 into PyPy due to a missing library symbol.
* LP#1727864, GH#258: Add \"-isysroot\" linker option on MacOS as needed by XCode 9.
* Mon Mar 19 2018 tchvatalAATTsuse.com- Version update to 4.2.0:
* GH#255: ``SelectElement.value`` returns more standard-compliant and browser-like defaults for non-multi-selects. If no option is selected, the value of the first option is returned (instead of None). If multiple options are selected, the value of the last one is returned (instead of that of the first one). If no options are present (not standard-compliant) ``SelectElement.value`` still returns ``None``.
* GH#261: The ``HTMLParser()`` now supports the ``huge_tree`` option. Patch by stranac.
* LP#1551797: Some XSLT messages were not captured by the transform error log.
* LP#1737825: Crash at shutdown after an interrupted iterparse run with XMLSchema validation.- Add patch python-lxml-assert.patch to pass test fail on threading
* Thu Feb 08 2018 mimi.vxAATTgmail.com- update to 4.1.1 - ElementPath supports text predicates for current node, like \"[.=\'text\']\". - ElementPath allows spaces in predicates. - Custom Element classes and XPath functions can now be registered with a decorator rather than explicit dict assignments. - LP#1722776: Requesting non-Element objects like comments from a document with PythonElementClassLookup could fail with a TypeError.