From 5cf73bebfc21263abb64b22e0f8cc05c8ee80271 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 18 Jun 2026 17:36:14 +0000 Subject: [PATCH] chore(deps): update lxml requirement from >=6.1.0 to >=6.1.1 Updates the requirements on [lxml](https://github.com/lxml/lxml) to permit the latest version. - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1) --- updated-dependencies: - dependency-name: lxml dependency-version: 6.1.1 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index a6913d8..7fdc01c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16,7 +16,7 @@ ebooklib>=0.20 # Pin to >=6.1.0 to fix PYSEC-2026-87 (XXE — lxml < 6.1.0 resolves # external entities by default, allowing crafted DOCX/PPTX/EPUB/PDF-XMP # files to read arbitrary local files). -lxml>=6.1.0 +lxml>=6.1.1 # Transitive of cryptography/requests; pinned to address advisories # PYSEC-2026-141 / 142 / GHSA series for urllib3 < 2.7.0. urllib3>=2.7.0