Release Date: 2025-07-10
Version: 1.3.16

Compatibility and Wheel Support

This release provides binary wheels that are fully compatible with lxml v6.0.0. The compatibility is ensured by using the same underlying libxml2 version in both python-xmlsec and lxml.

Because of this strict requirement, the wheels cannot be used with versions of lxml lower than 6.0.0. Mixing versions will lead to runtime errors.

Common Error

If you see the following message:

lxml & xmlsec libxml2 library version mismatch

it indicates that the version of libxml2 used to build lxml does not match the version used to build python-xmlsec.

Recommended Solutions

• Upgrade lxml to v6.0.0, or
• Build both lxml and python-xmlsec manually from source using the same libxml2 version

Wheel Build Configuration

Linux and macOS Wheels

These wheels are built against the following versions, which match those used in lxml v6.0.0:

• libxml2 v2.14.4
• libxslt v1.1.43
• xmlsec1 v1.3.7

Windows Binary Wheels

The Windows binary wheels were compiled using Visual Studio 2022 and include the following libraries:

• iconv v1.18-1
• libxml2 v2.11.9-3
• libxslt v1.1.39
• openssl v3.0.16.pl1
• xmlsec v1.3.7
• zlib v1.3.1

These versions are compatible with those used in lxml v6.0.0.

Acknowledgements

Special thanks to @TomiBelan for helping with the creation of binary wheels for this release.

What's Changed

• Explicitly cast the pointer type in PyXmlSec_ClearReplacedNodes by @hroncok in #325
• Fix sdist CI workflow by @jonathangreen in #330
• Build wheels for Python 3.13 by @jonathangreen in #329
• Fix linuxbrew workflow by @jonathangreen in #331
• Fix macosx CI workflow by @jonathangreen in #332
• Fix type mismatch in PyXmlSec_ClearReplacedNodes for Python 3.13 compatibility by @haya4ux in #340

New Contributors

• @hroncok made their first contribution in #325
• @haya4ux made their first contribution in #340

Full Changelog: 1.3.14...1.3.15

• XMLSec 1.3.x compliance
• Make DES/3DES/KW-3DES support conditional on DES availability in XMLSec
• PKCS11 support
• Improved libxml2 version check
• Several test improvements

Full Changelog: 1.3.13...1.3.14

• Add CI for Python 3.10, manylinux2 SOABI, musllinux1 SOABI and OpenSUSE Tumbleweed
• Introduce linting with pre-commit
• Rewrite PEP 484 stubs
• xmlsec workaround for gh##84 - Stanislav Levin (@mcepl)
• Resolve key loading issue on big-endian systems. - Chris MacNaughton (@ChrisMacNaughton)
• Fix building wheel when using PYXMLSEC_STATIC_DEPS=true
• setup.py: Fix typo in PYXMLSEC_LIBXSLT_VERSION - AbdealiJK (@AbdealiJK)
• Switch on modern headers lxml - Alexander Shadchin (@shadchin)
• use build to build wheels - Thomas Grainger (@graingert)
• remove pkgconfig as it's only a build-system requirement - Thomas Grainger (@graingert)
• exclude lxml 4.7 because the wheels are missing the lxml includes - Thomas Grainger (@graingert)

• Added support for registering custom xmlsec IO callbacks
• Added support for building without MD5 transforms
• Added support for PEP 539 for Python 3.7 and newer
• Using lxml-stubs package instead of custom LXML stubs

• Removed Python 2 compatibility code.
• Fixed bug with unused custom error callback.
• Added support for building with XMLSEC_NO_XSLT macro.
• Reactivated documentation builds on RTD.
• Switched docs theme to furo.

• Turned off building Python 2.7 wheels in CI pipelines
• Fixed libxmlsec1 version checks

• More tests added to increase test coverage
• Various small fixes for segfaults found
• Added xmlsec.base64_default_line_size() function to set the default maximum columns size for base64 encoding
• Added AES-GCM transform constants
• Added Python 3.9 support
• Recording code coverage also in MacOS jobs

Escape the XMLSEC_CRYPTO macro value, just as it was done in the original setup

Various improvements related to packaging, distribution, CI and documentation. Notable changes:

• Added PEP 484 type stubs.
• Moved documentation to RTD.
• Fixed segfault when trying to access missing attributes of some constants.
• Fixed building error with Python 2.7 on Windows.
• Added CI pipelines for manylinux2010 reference system and MacOS.
• Reworked setup script, preparing for PEP 571 wheels.
• Prohibited installation for unsupported Python versions.
• Using setuptools-scm for dist version calculation from Git tags.

• Fixed build for windows platform

• add method to load symmetric key from memory Key.from_binary_data
• add support decryption of EncodedKey
• fix segfautl in Key.from_binary_file
• fix debug trace

• Fixed memory leaks
• Added parameter 'id' to method xmlsec.template.create, 'name' is deprecated.
• Added more useful constants

• Added binding for method xmlSecTmplTransformAddC14NInclNamespaces
• Added new constants: NsExcC14N, NsExcC14NWithComments

• fixed work with dynamic crypto library #48

New release 1.0.5

• fixed issue #46

• Fixed issues with installation from pypi