Repository navigation
Please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes) #139312
Description
Bug report
Bug description:
Hello! 👋
(Once the upgrade to Expat 2.7.2 is complete at #138998) please upgrade bundled Expat to 2.7.3 (e.g. for two key bugfixes).
- GitHub release: https://github.com/libexpat/libexpat/releases/tag/R_2_7_3
- Change log: https://github.com/libexpat/libexpat/blob/R_2_7_3/expat/Changes
The CPython issue for previous 2.7.2 was #138998 and the related merged main pull request was #138999, in case you want to have a look. (The Dockerfile from comment #123689 (review) could be of help with raising confidence in a bump pull request when going forward.)
Thanks in advance!
CPython versions tested on:
3.9, 3.10, 3.11, 3.12, 3.13, 3.14, 3.15, CPython main branch
Operating systems tested on:
Linux, macOS, Windows, Other
Linked PRs
- gh-139312: Update bundled libexpat to 2.7.3 #139319
- [3.14] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139376
- [3.12] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139662
- [3.13] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139377
- [3.11] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139378
- [3.10] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139379
- [3.9] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) #139697
Reacted by Hedley
Activity
pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-139319)
pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-139319)
[3.14] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139376)
[3.13] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139377)
[3.11] pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-13…
[3.11] pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-13…
[3.11] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139378)
[3.10] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (#139379)
pyexpatrelated to.ExternalEntityParserCreate#139400pyexpatrelated to.ExternalEntityParserCreate#139400[3.12] pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-13…
[3.12] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (GH-13…
hartwork commentedon Oct 7, 2025
@picnixz could you drop label
3.12for me? I'll go ahead and close as done…ambv commentedon Oct 7, 2025
@hartwork actually, I would appreciate if you could backport to 3.9 as well. It is going EOL in October, but we will be releasing at least one final security release of it.
StanFromIreland commentedon Oct 7, 2025
Note that the previous backport was closed, I can reopen it.
picnixz commentedon Oct 7, 2025
Once 2.7.2 is backported, please backport 2.7.3. Thank you for that and sorry for changing the decision at the end.
hartwork commentedon Oct 7, 2025
@StanFromIreland I'm good with you or me doing it. I can get to it some time later today in the evening if it's not been done already by then, as you like 🤝
StanFromIreland commentedon Oct 7, 2025
SGTM
[3.10] pythongh-139312: Update bundled libexpat to 2.7.3 (pythonGH-13…
StanFromIreland commentedon Oct 7, 2025
I got Bedevere to do it instead:-)
[3.9] gh-139312: Update bundled libexpat to 2.7.3 (GH-139319) (GH-139697
hartwork commentedon Oct 7, 2025
@StanFromIreland perfect, thanks! 👍
@picnixz could you drop label 3.9 for me? I'll go ahead and close as done…
StanFromIreland commentedon Oct 7, 2025
FYI I removed it, but once it's closed we don't need to worry about such labels.
hartwork commentedon Oct 7, 2025
@StanFromIreland thanks, now even future visitors with OCD will feel at home again 😃