Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

📌(backend) pin lxml dependency to 5.2.1 #2580

Merged
merged 1 commit into from
May 6, 2024
Merged

Conversation

quitterie-lcs
Copy link
Member

Purpose

With the constraint on lxml<5, an error on the collectstatic occured about lxml
and xmlsec libxml2 versions mismatch.

Proposal

Pin lxml to the latest release fix this error.

@wilbrdt
Copy link
Contributor

wilbrdt commented Apr 26, 2024

@lunika you pinned lxml to <5.0.0 because of a segfault (#2554).
At what step did the segfault happen? Is it still there?
Seems like it may be corrected now (see SAML-Toolkits/python3-saml#389 (comment))

Copy link
Member

@kernicPanel kernicPanel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think the commit title should be something like unpin lxml and upgrade to 5.2.1
Aside from that, I add @lunika as a reviewer too.

@kernicPanel kernicPanel requested a review from lunika April 26, 2024 08:23
With the constraint on lxml<5, an error on the collectstatic occured about lxml
and xmlsec libxml2 versions mismatch. Unpin lxml to the latest release fix this
error. We give back renovate the permission to upgrade the package.
Copy link
Member

@lunika lunika left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have deployed it on staging and there is no more segfault.

Good work 👍

@lunika
Copy link
Member

lunika commented May 2, 2024

@wilbrdt the segfault happened when the user was going back from its CAS when logging using shibboleth.

@quitterie-lcs quitterie-lcs merged commit 8b7f32c into master May 6, 2024
31 of 33 checks passed
@quitterie-lcs quitterie-lcs deleted the fix-lxml branch May 6, 2024 08:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants