xmlsec 1.3.17__tar.gz → 1.3.18__tar.gz

{xmlsec-1.3.17 → xmlsec-1.3.18}/.pre-commit-config.yaml

@@ -2,7 +2,7 @@
 # See https://pre-commit.com/hooks.html for more hooks
 repos:
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: v0.14.4
+  rev: v0.17.1
   hooks:
     - id: ruff
       args: ["--fix"]
@@ -28,7 +28,7 @@ repos:
       args: [--autofix]
 
 - repo: https://github.com/pre-commit/mirrors-mypy
-  rev: v1.18.2
+  rev: v2.4.0
   hooks:
     - id: mypy
       exclude: (setup.py|tests|build_support/.*.py|doc/.*)

{xmlsec-1.3.17 → xmlsec-1.3.18}/.readthedocs.yaml

@@ -1,9 +1,9 @@
 version: 2
 
 build:
-  os: ubuntu-20.04
+  os: ubuntu-24.04
   tools:
-    python: '3.9'
+    python: '3.14'
 
 sphinx:
   configuration: doc/source/conf.py

{xmlsec-1.3.17/src/xmlsec.egg-info → xmlsec-1.3.18}/PKG-INFO

@@ -1,51 +1,33 @@
 Metadata-Version: 2.4
 Name: xmlsec
-Version: 1.3.17
+Version: 1.3.18
 Summary: Python bindings for the XML Security Library
-Home-page: https://github.com/mehcode/python-xmlsec
-Author: Bulat Gaifullin
-Author-email: support@mehcode.com
-Maintainer: Oleg Hoefling
-Maintainer-email: oleg.hoefling@gmail.com
-License: MIT
+Author-email: Bulat Gaifullin <support@mehcode.com>
+Maintainer-email: Oleg Hoefling <oleg.hoefling@gmail.com>, Amin Solhizadeh <amin.solhizadeh@gmail.com>
+License-Expression: MIT
 Project-URL: Documentation, https://xmlsec.readthedocs.io
-Project-URL: Source, https://github.com/mehcode/python-xmlsec
-Project-URL: Changelog, https://github.com/mehcode/python-xmlsec/releases
+Project-URL: Source, https://github.com/xmlsec/python-xmlsec
+Project-URL: Changelog, https://github.com/xmlsec/python-xmlsec/releases
 Keywords: xmlsec
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Intended Audience :: System Administrators
-Classifier: License :: OSI Approved :: MIT License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: C
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Topic :: Text Processing :: Markup :: XML
 Classifier: Typing :: Typed
-Requires-Python: >=3.9
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: lxml>=3.8
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
 Dynamic: license-file
-Dynamic: maintainer
-Dynamic: maintainer-email
-Dynamic: project-url
-Dynamic: requires-dist
-Dynamic: requires-python
-Dynamic: summary
 
 # python-xmlsec
 
@@ -136,6 +118,58 @@ apk add build-base openssl libffi-dev openssl-dev libxslt-dev libxml2-dev xmlsec
 
 ## Troubleshooting
 
+### `lxml & xmlsec libxml2 library version mismatch`
+
+`xmlsec` passes `lxml` XML nodes to the underlying `xmlsec1` library. Both
+libraries use `libxml2`, so they must use compatible `libxml2` versions at
+runtime. If `lxml` is installed from a wheel that bundles one `libxml2`
+version while `xmlsec` is built against another system `libxml2`, importing
+or using `xmlsec` can fail with:
+
+``` text
+xmlsec.InternalError: (-1, 'lxml & xmlsec libxml2 library version mismatch')
+```
+
+The most reliable fixes are:
+
+- Use prebuilt wheels for both `lxml` and `xmlsec` when wheels are available
+  for your platform:
+
+  ``` bash
+  pip install --only-binary=lxml,xmlsec lxml xmlsec
+  ```
+
+- If you need to build from source, build both packages against the same
+  locally installed `libxml2`:
+
+  ``` bash
+  pip install --no-binary=lxml,xmlsec lxml xmlsec
+  ```
+
+Do not mix a wheel-built `lxml` with a locally built `xmlsec`, or the other
+way around, unless you know they use the same `libxml2` version.
+
+An `lxml` release upgrade does not by itself mean `xmlsec` is incompatible;
+this error is about the `libxml2` libraries loaded in that environment.
+
+If the error appears only under uWSGI, uWSGI may have loaded the system
+`libxml2` before Python imports `lxml` or `xmlsec`. In that case, make sure
+uWSGI and the Python packages resolve to the same `libxml2`, or rebuild the
+Python packages from source in that environment. If you use `uv`, clear any
+cached mixed builds before reinstalling. For example, to reinstall from
+wheels:
+
+``` bash
+uv pip uninstall lxml xmlsec
+uv cache clean
+uv pip install --only-binary lxml --only-binary xmlsec lxml xmlsec
+```
+
+For background, see
+[issue #356](https://github.com/xmlsec/python-xmlsec/issues/356) and the
+uWSGI edge case in
+[issue #415](https://github.com/xmlsec/python-xmlsec/issues/415).
+
 ### Mac
 
 If you get any fatal errors about missing `.h` files, update your

xmlsec-1.3.17/PKG-INFO → xmlsec-1.3.18/README.md

@@ -1,52 +1,3 @@
-Metadata-Version: 2.4
-Name: xmlsec
-Version: 1.3.17
-Summary: Python bindings for the XML Security Library
-Home-page: https://github.com/mehcode/python-xmlsec
-Author: Bulat Gaifullin
-Author-email: support@mehcode.com
-Maintainer: Oleg Hoefling
-Maintainer-email: oleg.hoefling@gmail.com
-License: MIT
-Project-URL: Documentation, https://xmlsec.readthedocs.io
-Project-URL: Source, https://github.com/mehcode/python-xmlsec
-Project-URL: Changelog, https://github.com/mehcode/python-xmlsec/releases
-Keywords: xmlsec
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: Intended Audience :: Developers
-Classifier: Intended Audience :: System Administrators
-Classifier: License :: OSI Approved :: MIT License
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: C
-Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
-Classifier: Programming Language :: Python :: 3.14
-Classifier: Topic :: Text Processing :: Markup :: XML
-Classifier: Typing :: Typed
-Requires-Python: >=3.9
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: lxml>=3.8
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
-Dynamic: license-file
-Dynamic: maintainer
-Dynamic: maintainer-email
-Dynamic: project-url
-Dynamic: requires-dist
-Dynamic: requires-python
-Dynamic: summary
-
 # python-xmlsec
 
 [![image](https://img.shields.io/pypi/v/xmlsec.svg?logo=python&logoColor=white)](https://pypi.python.org/pypi/xmlsec)
@@ -136,6 +87,58 @@ apk add build-base openssl libffi-dev openssl-dev libxslt-dev libxml2-dev xmlsec
 
 ## Troubleshooting
 
+### `lxml & xmlsec libxml2 library version mismatch`
+
+`xmlsec` passes `lxml` XML nodes to the underlying `xmlsec1` library. Both
+libraries use `libxml2`, so they must use compatible `libxml2` versions at
+runtime. If `lxml` is installed from a wheel that bundles one `libxml2`
+version while `xmlsec` is built against another system `libxml2`, importing
+or using `xmlsec` can fail with:
+
+``` text
+xmlsec.InternalError: (-1, 'lxml & xmlsec libxml2 library version mismatch')
+```
+
+The most reliable fixes are:
+
+- Use prebuilt wheels for both `lxml` and `xmlsec` when wheels are available
+  for your platform:
+
+  ``` bash
+  pip install --only-binary=lxml,xmlsec lxml xmlsec
+  ```
+
+- If you need to build from source, build both packages against the same
+  locally installed `libxml2`:
+
+  ``` bash
+  pip install --no-binary=lxml,xmlsec lxml xmlsec
+  ```
+
+Do not mix a wheel-built `lxml` with a locally built `xmlsec`, or the other
+way around, unless you know they use the same `libxml2` version.
+
+An `lxml` release upgrade does not by itself mean `xmlsec` is incompatible;
+this error is about the `libxml2` libraries loaded in that environment.
+
+If the error appears only under uWSGI, uWSGI may have loaded the system
+`libxml2` before Python imports `lxml` or `xmlsec`. In that case, make sure
+uWSGI and the Python packages resolve to the same `libxml2`, or rebuild the
+Python packages from source in that environment. If you use `uv`, clear any
+cached mixed builds before reinstalling. For example, to reinstall from
+wheels:
+
+``` bash
+uv pip uninstall lxml xmlsec
+uv cache clean
+uv pip install --only-binary lxml --only-binary xmlsec lxml xmlsec
+```
+
+For background, see
+[issue #356](https://github.com/xmlsec/python-xmlsec/issues/356) and the
+uWSGI edge case in
+[issue #415](https://github.com/xmlsec/python-xmlsec/issues/415).
+
 ### Mac
 
 If you get any fatal errors about missing `.h` files, update your

xmlsec-1.3.18/build_libs_xmlsec.py

@@ -0,0 +1,55 @@
+import argparse
+import os
+import sys
+from pathlib import Path
+
+from build_support.lib_xmlsec_dependency_builder import LibXmlsecDependencyBuilder
+
+
+def _console_info(message):
+    print(message)
+
+
+def main(argv=None):
+    parser = argparse.ArgumentParser(description='Download and build static dependency libraries for python-xmlsec.')
+    parser.add_argument(
+        '--platform',
+        default=sys.platform,
+        help='Target platform (default: current interpreter platform).',
+    )
+    parser.add_argument(
+        '--plat-name',
+        default=os.environ.get('PYXMLSEC_PLAT_NAME'),
+        help='Target platform tag for cross-compiling (for example macosx-11.0-arm64).',
+    )
+    parser.add_argument(
+        '--libs-dir',
+        default=os.environ.get('PYXMLSEC_LIBS_DIR', 'libs'),
+        help='Directory where source/binary archives are stored.',
+    )
+    parser.add_argument(
+        '--buildroot',
+        default=Path('build', 'tmp'),
+        type=Path,
+        help='Build root for extracted/build artifacts.',
+    )
+    parser.add_argument(
+        '--download-only',
+        action='store_true',
+        help='Only download dependency archives; do not extract/build.',
+    )
+
+    args = parser.parse_args(argv)
+    builder = LibXmlsecDependencyBuilder(
+        platform_name=args.platform,
+        info=_console_info,
+        libs_dir=Path(args.libs_dir),
+        buildroot=args.buildroot,
+        plat_name=args.plat_name,
+    )
+    builder.prepare(download_only=args.download_only)
+    return 0
+
+
+if __name__ == '__main__':
+    raise SystemExit(main())

{xmlsec-1.3.17 → xmlsec-1.3.18}/build_support/build_ext.py

@@ -8,16 +8,27 @@ from setuptools.command.build_ext import build_ext as build_ext_orig
 from .static_build import CrossCompileInfo, StaticBuildHelper
 
 
+def _env_flag(name: str, default: bool) -> bool:
+    value = os.environ.get(name)
+    if value is None:
+        return default
+
+    return value.strip().lower() not in {'', '0', 'false', 'no', 'off'}
+
+
 class build_ext(build_ext_orig):
-    def info(self, message):
+    def __init__(self, *args, **kwargs) -> None:
+        super().__init__(*args, **kwargs)
+
+        self.debug = _env_flag('PYXMLSEC_ENABLE_DEBUG', False)
+        self.static = _env_flag('PYXMLSEC_STATIC_DEPS', False)
+        self.size_opt = _env_flag('PYXMLSEC_OPTIMIZE_SIZE', True)
+
+    def info(self, message) -> None:
         self.announce(message, level=log.INFO)
 
-    def run(self):
+    def run(self) -> None:
         ext = self.ext_map['xmlsec']
-        self.debug = os.environ.get('PYXMLSEC_ENABLE_DEBUG', False)
-        self.static = os.environ.get('PYXMLSEC_STATIC_DEPS', False)
-        self.size_opt = os.environ.get('PYXMLSEC_OPTIMIZE_SIZE', True)
-
         if self.static or sys.platform == 'win32':
             helper = StaticBuildHelper(self)
             helper.prepare(sys.platform)