Bump lxml from 5.4.0 to 6.0.2

[dependabot]

Bumps lxml from 5.4.0 to 6.0.2.

Changelog

Sourced from lxml's changelog.

6.0.2 (2025-09-21)

Bugs fixed

• LP#2125278: Compilation with libxml2 2.15.0 failed. Original patch by Xi Ruoyao.

• Setting decompress=True in the parser had no effect in libxml2 2.15.

• Binary wheels on Linux and macOS use the library version libxml2 2.14.6. See https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.6

• Test failures in libxml2 2.15.0 were fixed.

Other changes

• Binary wheels for Py3.9-3.11 on the riscv64 architecture were added.

• Error constants were updated to match libxml2 2.15.0.

• Built using Cython 3.1.4.

6.0.1 (2025-08-22)

Bugs fixed

• LP#2116333: lxml.sax._getNsTag() could fail with an exception on malformed input.

• GH#467: Some test adaptations were made for libxml2 2.15. Patch by Nick Wellnhofer.

• LP2119510, GH#473: A Python compatibility test was fixed for Python 3.14+. Patch by Lumír Balhar.

• GH#471: Wheels for "riscv64" on recent Python versions were added. Patch by ffgan.

• GH#469: The wheel build no longer requires the wheel package unconditionally. Patch by Miro Hrončok.

• Binary wheels use the library version libxml2 2.14.5. See https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5

• Windows binary wheels continue to use a security patched library version libxml2 2.11.9.

... (truncated)

Commits

• 283d02e Build: Minor readability cleanup.
• 52cf97c Revert "Build: Avoid redundant manylinux2014 builds across newer jobs."
• a21e474 Build: Avoid redundant manylinux2014 builds across newer jobs.
• 58d4d2b Build: Upgrade libxml2 to 2.14.6.
• e5d80da Build: Clean up and simplify target selection and environment setup in pyproj...
• e913380 Build: Limit optimised wheel builds to AMD64 and Arm64 to save time and resou...
• d22f6a1 Build: bump actions/setup-python in the github-actions group (GH-479)
• f8fa76d Build: Prevent redundant branch wheel builds for pull requests.
• b3e9372 Build: bump pypa/cibuildwheel in the github-actions group (GH-478)
• a7ec229 Prepare release of lxml 6.0.2.
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Important

Bump lxml from 5.4.0 to 6.0.2 in requirements.txt with various bug fixes and improvements.

• Dependency Update:
  • Bump lxml from 5.4.0 to 6.0.2 in requirements.txt.
• Changelog Highlights:
  • Fixes compilation issues with libxml2 2.15.0 and test failures.
  • Adds binary wheels for riscv64 architecture.
  • Updates error constants for libxml2 2.15.0.
  • Built using Cython 3.1.4.

^{This description was created by for 4ae6bbe. You can customize this summary. It will automatically update as commits are pushed.}

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to 4ae6bbe in 43 seconds. Click for details.

• Reviewed 13 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 1 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. requirements.txt:20

• Draft comment:
  Bumped lxml from 5.4.0 to 6.0.2. Please ensure that this update is compatible with all usages and that tests pass with the new libxml2 bindings.
• Reason this comment was not posted:
  Confidence changes required: 50% <= threshold 50% None

Workflow ID: wflow_1A63pHnQepnQZc71

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}