chore(deps): bump lxml from 6.0.2 to 6.0.4

[dependabot]

Bumps lxml from 6.0.2 to 6.0.4.

Changelog

Sourced from lxml's changelog.

6.0.4 (2026-04-12)

Bugs fixed

• LP#2148019: Spurious MemoryError during namespace cleanup.

6.0.3 (2026-04-09)

Bugs fixed

• Several out of memory error cases now raise MemoryError that were not handled before.

• Slicing with large step values (outside of +/- sys.maxsize) could trigger undefined C behaviour.

• LP#2125399: Some failing tests were fixed or disabled in PyPy.

• LP#2138421: Memory leak in error cases when setting the public_id or system_url of a document.

• Memory leak in case of a memory allocation failure when copying document subtrees.

• When mapping an XPath result to Python failed, the result memory could leak.

• When preparing an XSLT transform failed, the XSLT parameter memory could leak.

Other changes

• Built using Cython 3.2.4.

• Binary wheels use zlib 1.3.2.

Commits

• 1fd1d6b Fix release date.
• 5154859 CI: Include all library versions in libs cache key to asssure updated on vers...
• 6a606f3 Add "doesn't crash" tests for LP#2148019.
• f488f16 Prepare release of 6.0.4.
• 1255d98 LP#2148019: Prevent spurious MemoryError during namespace cleanup.
• 03b0c4a Remove dead type check.
• a6f833c Fix release date.
• 973d059 Update changelog.
• 9044a52 Build: Downgrade libiconv to 1.18 since 1.19 does not build reliably.
• a34dfdd Build: Upgrade libiconv to 1.19.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅MegaLinter analysis: Success

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	8		0	0	0.01s
✅ JSON	prettier	4	1	0	0	0.48s
✅ JSON	v8r	4		0	0	4.46s
✅ MARKDOWN	markdownlint	5	0	0	0	0.9s
✅ MARKDOWN	markdown-table-formatter	5	0	0	0	0.29s
✅ REPOSITORY	checkov	yes		no	no	22.01s
✅ REPOSITORY	gitleaks	yes		no	no	0.34s
✅ REPOSITORY	git_diff	yes		no	no	0.0s
✅ REPOSITORY	grype	yes		no	no	39.38s
✅ REPOSITORY	secretlint	yes		no	no	1.59s
✅ REPOSITORY	syft	yes		no	no	2.77s
✅ REPOSITORY	trivy	yes		no	no	10.23s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.18s
✅ REPOSITORY	trufflehog	yes		no	no	4.38s
✅ SPELL	lychee	22		0	0	26.28s
✅ YAML	prettier	11	0	0	0	0.72s
✅ YAML	v8r	11		0	0	7.76s
✅ YAML	yamllint	11		0	0	0.61s

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.4.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,JSON_V8R,JSON_PRETTIER,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_GRYPE,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_LYCHEE,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository

[github-actions]

Pull Request Report (#95)

Static measures

Description	Value
Number of added lines	269
Number of deleted lines	141
Number of changed files	1
Number of commits	1
Number of reviews	1
Number of comments (w/o review comments)	1
Number of reviews that contains a comment to resolve	0
Number of reviews that requested a change from the author	0
Number of reviews that approved the Pull Request	1
Get the total number of participants of a Pull Request	3

Time related measures

Description	Value
PR lead time (from creation to close of PR)	8.7 Hours
Time that was spend on the branch before the PR was created	1 Sec
Time that was spend on the branch before the PR was merged	8.7 Hours
Time to merge after last review	6 Sec

Status check related measures

Description	Value
Total runtime for last status check run (Workflow for PR)	6.2 Min
Total time spend in last status check run on PR	2.2 Min