Fix Windows ARM64 wheels and bump bundled libraries

Windows ARM64 wheel builds have failed since the windows-11-arm runner
moved to the VS2026 image (MSVC 14.44 -> 14.51) with C1047: the prebuilt
iconv_a.lib was compiled with /GL, which only links with the exact same
compiler build.

- Download Windows libs from win-binaries release 2026.10.23, where
  libiconv is built without /GL.
- Run the AMD64 Windows jobs on windows-2025-vs2026, since the libs are
  now built with VS2026 and need a linker at least that new.
- Windows libs: iconv 1.19-1, libxml2 2.11.9-8, libxslt 1.1.45,
  openssl 3.5.9, xmlsec 1.3.12, zlib 1.3.2.
- Unix libs: libiconv 1.19, openssl 3.6.5, xmlsec1 1.3.12, zlib 1.3.2.
  libxml2 stays at 2.14.6 to match lxml, and libxslt stays at 1.1.43
  because 1.1.44+ requires libxml2 >= 2.15.1.

Author: mxamin

.github/workflows/cache_libs.yml

@@ -4,7 +4,7 @@ on:
   workflow_call:
     inputs:
       LIBICONV_VERSION:
-        default: "1.18"
+        default: "1.19"
         required: false
         type: string
       LIBXML2_VERSION:
@@ -16,39 +16,39 @@ on:
         required: false
         type: string
       OPENSSL_VERSION:
-        default: "3.6.0"
+        default: "3.6.5"
         required: false
         type: string
       XMLSEC1_VERSION:
-        default: "1.3.11"
+        default: "1.3.12"
         required: false
         type: string
       ZLIB_VERSION:
-        default: "1.3.1"
+        default: "1.3.2"
         required: false
         type: string
       WIN_LIBICONV_VERSION:
-        default: "1.18-1"
+        default: "1.19-1"
         required: false
         type: string
       WIN_LIBXML2_VERSION:
-        default: "2.11.9-3"
+        default: "2.11.9-8"
         required: false
         type: string
       WIN_LIBXSLT_VERSION:
-        default: "1.1.39"
+        default: "1.1.45"
         required: false
         type: string
       WIN_OPENSSL_VERSION:
-        default: "3.5.6"
+        default: "3.5.9"
         required: false
         type: string
       WIN_XMLSEC1_VERSION:
-        default: "1.3.11"
+        default: "1.3.12"
         required: false
         type: string
       WIN_ZLIB_VERSION:
-        default: "1.3.1"
+        default: "1.3.2"
         required: false
         type: string
 
@@ -87,7 +87,7 @@ jobs:
           - "ubuntu-22.04"
           - "ubuntu-22.04-arm"
           - "macos-latest"
-          - "windows-2022"
+          - "windows-2025-vs2026"
           - "windows-11-arm"
 
     runs-on: ${{ matrix.os }}

.github/workflows/wheels.yml

@@ -96,7 +96,7 @@ jobs:
               && cibuildwheel --print-build-identifiers --platform macos \
               | jq -nRc '{"only": inputs, "os": "macos-latest"}' \
               && cibuildwheel --print-build-identifiers --platform windows \
-              | jq -nRc '{"only": inputs, "os": "windows-2022"}' \
+              | jq -nRc '{"only": inputs, "os": "windows-2025-vs2026"}' \
               && cibuildwheel --print-build-identifiers --platform windows --archs ARM64 \
               | jq -nRc '{"only": inputs, "os": "windows-11-arm"}'
             } | jq -sc

build_support/lib_xmlsec_dependency_builder.py

@@ -36,7 +36,7 @@ def triplet(self) -> str:
 
 
 class LibXmlsecDependencyBuilder:
-    WINDOWS_LIBS_DOWNLOAD_RELEASE_URL = 'https://github.com/mxamin/python-xmlsec-win-binaries/releases/download/2026.04.28/'
+    WINDOWS_LIBS_DOWNLOAD_RELEASE_URL = 'https://github.com/mxamin/python-xmlsec-win-binaries/releases/download/2026.10.23/'
     LIB_VERSION_ENV_VARS: ClassVar[dict[str, str]] = {
         'libiconv_version': 'PYXMLSEC_LIBICONV_VERSION',
         'libxml2_version': 'PYXMLSEC_LIBXML2_VERSION',
@@ -46,20 +46,20 @@ class LibXmlsecDependencyBuilder:
         'zlib_version': 'PYXMLSEC_ZLIB_VERSION',
     }
     UNIX_DEFAULT_LIB_VERSIONS: ClassVar[dict[str, str]] = {
-        'libiconv_version': '1.18',
+        'libiconv_version': '1.19',
         'libxml2_version': '2.14.6',  # Make sure it matches with lxml
-        'libxslt_version': '1.1.43',
-        'openssl_version': '3.6.0',
-        'xmlsec1_version': '1.3.11',
-        'zlib_version': '1.3.1',
+        'libxslt_version': '1.1.43',  # 1.1.44+ requires libxml2 >= 2.15.1
+        'openssl_version': '3.6.5',
+        'xmlsec1_version': '1.3.12',
+        'zlib_version': '1.3.2',
     }
     WINDOWS_DEFAULT_LIB_VERSIONS: ClassVar[dict[str, str]] = {
-        'libiconv_version': '1.18-1',
-        'libxml2_version': '2.11.9-3',  # Make sure it matches with lxml
-        'libxslt_version': '1.1.39',
-        'openssl_version': '3.5.6',
-        'xmlsec1_version': '1.3.11',
-        'zlib_version': '1.3.1',
+        'libiconv_version': '1.19-1',
+        'libxml2_version': '2.11.9-8',  # Make sure it matches with lxml
+        'libxslt_version': '1.1.45',
+        'openssl_version': '3.5.9',
+        'xmlsec1_version': '1.3.12',
+        'zlib_version': '1.3.2',
     }
 
     def __init__(self, platform_name, info=None, libs_dir=None, buildroot=None, plat_name=None):