lxml release 4.9.1 is missing a macOS wheel for Python 3.10

Bug #1982981 reported by Philippe Ombredanne
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
lxml
New
Undecided
Unassigned

Bug Description

lxml release 4.9.1 is missing a macOS wheel for Python 3.10. It is available however for windows and linux alright. This is for x86. Not m1.

CVE References

Revision history for this message
Philippe Ombredanne (pombredanne) wrote :

FWIW, if this could help I use these scripts for a project that I co-maintain https://github.com/WojciechMula/pyahocorasick/blob/master/.github/workflows/test-and-build.yml (Stolen with credits from Google's brotli repo ;) )
This is not Cython-based and as involved as lxml but works OK for a C extension.

I also use mostly the same for https://github.com/inveniosoftware/intbitset/blob/master/.github/workflows/test-and-build.yml that I also co-maintain and which is a simple Cython-based extensions.

Since https://github.com/lxml/lxml/blob/master/.github/workflows/wheels.yml is also based on GH actions, it may not too complex to borrow from these?

But then again neither of these packages has anything near the sophistication of lxml despite being also native extensions.

PS: I am super grateful for this library!

Revision history for this message
Mikey Doyle (mike45678098765419143982781) wrote :

Note that the wheel *is* available for 4.9.0.

This is causing a problem for me because the build process can't find `xcrun`. Despite building all sorts of packages all the time, I've never run into this problem before.

Revision history for this message
Philippe Ombredanne (pombredanne) wrote :

Yes, 4.9.0 is available... but 4.9.1 is also fixing https://www.cve.org/CVERecord?id=CVE-2022-2309

Revision history for this message
John Hagen (johnthagen) wrote :

This causes issues for use on mac as LXML takes a very long time to install from `sdist` and can fail if the environment is not set up perfectly. Was there a technical reason a mac x86-64 wheel was uploaded for 4.9.0 but not 4.9.1?

Or was this a simple oversight?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.