Skip to content

Bump xmlschema from 4.0.1 to 4.2.0#249

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/uv/xmlschema-4.2.0
Closed

Bump xmlschema from 4.0.1 to 4.2.0#249
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/uv/xmlschema-4.2.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps xmlschema from 4.0.1 to 4.2.0.

Release notes

Sourced from xmlschema's releases.

v4.2.0 (2025-10-14)

  • Add arguments validation for schemas and validation methods (by validation contexts)
  • Add SchemaSettings dataclass for storing read-only settings for schema instances and for managing package default settings
  • Add block argument to XMLResource class (issue #464)
  • Add MAX_SCHEMA_SOURCES package limit (1000, applied to XsdGlobals global maps instances)
  • Add MAX_XML_ELEMENTS package limit (1,000,000, applied to non-lazy XMLResource instances)
  • Reduce MAX_XML_DEPTH limit to 1000 and apply it to all XMLResource instances
  • Fix for substitute match in case of unexpected child (issue #461)

v4.1.0 (2025-06-05)

  • Add XPath selectors: ElementSelector and ElementPathSelectors
  • Add selector argument to XMLResource and iterparse filters
  • Fix element substitution (issue #452)
  • Restore v3.4.5 builder methods as helpers (issue #451)
  • Add overall_min_occurs and overall_max_occurs helpers to XsdElement (issue #449)
  • Extend error message for XML syntax errors (issue #448)
  • Fix query/fragment like for filenames (issue #447)
Changelog

Sourced from xmlschema's changelog.

v4.2.0_ (2025-10-14)

  • Add arguments validation for schemas and validation methods (by validation contexts)
  • Add SchemaSettings dataclass for storing read-only settings for schema instances and for managing package default settings
  • Add block argument to XMLResource class (issue #464)
  • Add MAX_SCHEMA_SOURCES package limit (1000, applied to XsdGlobals global maps instances)
  • Add MAX_XML_ELEMENTS package limit (1,000,000, applied to non-lazy XMLResource instances)
  • Reduce MAX_XML_DEPTH limit to 1000 and apply it to all XMLResource instances
  • Fix for substitute match in case of unexpected child (issue #461)

v4.1.0_ (2025-06-05)

  • Add XPath selectors: ElementSelector and ElementPathSelectors
  • Add selector argument to XMLResource and iterparse filters
  • Fix element substitution (issue #452)
  • Restore v3.4.5 builder methods as helpers (issue #451)
  • Add overall_min_occurs and overall_max_occurs helpers to XsdElement (issue #449)
  • Extend error message for XML syntax errors (issue #448)
  • Fix query/fragment like for filenames (issue #447)
Commits
  • 2783030 Bump minor release
  • 7c77a12 Include publiccode.yml validation workflow for CI and README changes
  • 04c19d5 Fix XsdGroup.match_element (issue #461)
  • dd4f279 Merge pull request #463 from publiccode-pr-bot/chore/add-publiccode-parser-ac...
  • 1bd7aa6 Update GitHub workflow for CI
  • 76b0f67 Patch mypy tests with protocols
  • 28727bb Update docs and release info
  • e4131ea Add from_settings() class method to schemas
  • 0aea8de Rewrite validation contexts as normal classes
  • d443d7b Full validation of context arguments
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [xmlschema](https://github.com/sissaschool/xmlschema) from 4.0.1 to 4.2.0.
- [Release notes](https://github.com/sissaschool/xmlschema/releases)
- [Changelog](https://github.com/sissaschool/xmlschema/blob/master/CHANGELOG.rst)
- [Commits](sissaschool/xmlschema@v4.0.1...v4.2.0)

---
updated-dependencies:
- dependency-name: xmlschema
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 1, 2025
@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 1, 2025

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 1, 2026

Superseded by #260.

@dependabot dependabot bot closed this Feb 1, 2026
@dependabot dependabot bot deleted the dependabot/uv/xmlschema-4.2.0 branch February 1, 2026 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants