Deprecation warning: defusedxml.lxml is no longer supported ...

[mhooreman]

Hello,

It seems that openpyxl uses deprecated defusedxml.lxml.

• Python version: 3.7.4
• defusedxml version: 0.6.0
• openpyxl version: 2.6.3

  File "{myvenvlocation}/lib/python3.7/site-packages/pandas/io/excel/_openpyxl.py", line 19, in __init__
    from openpyxl.workbook import Workbook
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/__init__.py", line 6, in <module>
    from openpyxl.workbook import Workbook
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/workbook/__init__.py", line 5, in <module>
    from .workbook import Workbook
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/workbook/workbook.py", line 8, in <module>
    from openpyxl.worksheet.worksheet import Worksheet
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/worksheet/worksheet.py", line 30, in <module>
    from openpyxl.cell import Cell, MergedCell
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/cell/__init__.py", line 4, in <module>
    from .cell import Cell, WriteOnlyCell, MergedCell
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/cell/cell.py", line 46, in <module>
    from openpyxl.utils.inference import (
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/utils/inference.py", line 10, in <module>
    from openpyxl.styles import numbers
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/styles/__init__.py", line 5, in <module>
    from .alignment import Alignment
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/styles/alignment.py", line 6, in <module>
    from openpyxl.descriptors import Bool, MinMax, Min, Alias, NoneSet
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/descriptors/__init__.py", line 5, in <module>
    from .sequence import Sequence
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/descriptors/sequence.py", line 5, in <module>
    from openpyxl.xml.functions import Element
  File "{myvenvlocation}/lib/python3.7/site-packages/openpyxl/xml/functions.py", line 31, in <module>
    from defusedxml.lxml import fromstring as _fromstring, tostring
  File "{myvenvlocation}/lib/python3.7/site-packages/defusedxml/lxml.py", line 29, in <module>
    stacklevel=2,
DeprecationWarning: defusedxml.lxml is no longer supported and will be removed in a future release.

Best regards

[katekuehl]

Any progress on this?

[MartinThoma]

@katekuehl I cannot find defusedxml in the openpyxl codebase anymore. Was it removed?

[ellabebop]

@MartinThoma, looks like it, per this and this. openpyxl.xml.__init__.py lets you set $OPENPYXL_DEFUSEDXML to something other than True to avoid using that library, I think.