fix: update lxml to 6.1.0 for CVE-2026-41066 (backport #250) (#252)

mergify[bot] · Copilot · barredterra · web-flow · commit d2a048bb75ae · 2026-04-22T03:38:14.000+02:00
Co-authored-by: Copilot &lt;198982749+Copilot@users.noreply.github.com&gt;
Co-authored-by: barredterra &lt;14891507+barredterra@users.noreply.github.com&gt;
diff --git a/pyproject.toml b/pyproject.toml
@@ -12,7 +12,7 @@ dependencies = [
     "factur-x~=3.1",
     "drafthorse~=2025.1.0",
     "saxonche>=12.5.0,<13.0.0",
-    "lxml>=4.9.3,<=6.0.2",
+    "lxml>=6.1.0,<7.0.0",
 ]
 
 [build-system]

Original file line number	Diff line number	Diff line change
`@@ -12,7 +12,7 @@ dependencies = [`
`12`	`12`	`"factur-x~=3.1",`
`13`	`13`	`"drafthorse~=2025.1.0",`
`14`	`14`	`"saxonche>=12.5.0,<13.0.0",`
`15`		`- "lxml>=4.9.3,<=6.0.2",`
	`15`	`+ "lxml>=6.1.0,<7.0.0",`
`16`	`16`	`]`
`17`	`17`
`18`	`18`	`[build-system]`