Skip to content

Release notes for sbml2cellml 0.4.3

sbml2cellml logo

Security release: the locked environment no longer trusts the compromised emSign root CA (#60).

Security

  • certifi 2026.10.19 in uv.lock (GHSA-6q48-6c7w-9gw2): earlier versions of the CA bundle trust the emSign root CA whose intermediate keys were compromised. certifi is no runtime dependency of sbml2cellml, it comes in with requests of the testsuite and dev extras; an environment of these extras should update certifi to 2026.10.19 or later
  • uv 0.13.4 in uv.lock (GHSA-hq85-5cpj-mr62), whose bundled CA store has the same issue; the workflows install the latest uv

Changes

  • the logo above the README, the documentation and every release notes page, and a favicon of the documentation (#58)
  • less load of continuous integration: the tests run python 3.14 on linux and macos, python 3.13 is tested locally, a superseded run is cancelled, uv caches the interpreters, dependabot runs monthly, the 15 slowest tests are listed (#59)
  • the workflows use the interpreters of uv without the python dev files of the deadsnakes ppa (#59, #60), and astral-sh/setup-uv 10.2.0 (#57)
  • the context manager which takes the rate rules out of a model is annotated as a Generator, as ty 0.0.90 requires

Limitations

  • the unit check of the libcellml 0.7.1 analyser warns about consistent equations with units which have a multiplier and an exponent, e.g., per minute (cellml/libcellml#1463); the warnings do not make a model invalid
  • events, the delay symbol and coupled algebraic rules are not converted
  • Windows is not supported, the Windows wheels of libcellml 0.7.1 contain ARM64 binaries
  • see the conversion issues in the documentation

Your sbml2cellml team