Can signxml use lxml >= 6?

[jarshwah]

signxml/pyproject.toml

Line 30 in a2eeeb7

"lxml >= 5.2.1, < 6", # Ubuntu 24.04 LTS

defines an lxml dependency of >=5.2.1 <6.

Version 6 of lxml has just been released, and xmlsec now builds against it. So we can't yet update our xmlsec or lxml version due to the constraint above.

Is there a particular reason the constraint forbids >=6 or is it being cautious?

[kislyuk]

There is no specific reason, just being cautious. I'm going to go ahead and change the constraint to < 7.