build(deps): bump the minor-and-patch group across 1 directory with 14 updates

[dependabot]

Bumps the minor-and-patch group with 14 updates in the /src directory:

Package	From	To
langchain-core	1.5.3	1.6.1
python-dotenv	1.2.2	1.2.3
langchain-openai	1.4.3	1.6.0
tiktoken	0.13.0	0.14.0
pydantic	2.13.4	2.13.5
spacy	3.8.14	3.8.16
mcp	2.0.0	2.1.1
pypdf	6.15.0	6.16.2
nltk	3.10.2	3.10.3
transformers	5.15.0	5.16.1
sqlalchemy	2.0.51	2.0.52
langchain-anthropic	1.5.4	1.7.0
boto3	1.43.68	1.43.83
mypy	2.3.0	2.3.1

Updates langchain-core from 1.5.3 to 1.6.1

Release notes

Sourced from langchain-core's releases.

langchain-core==1.6.1

Changes since langchain-core==1.6.0

revert: release(core): 1.6.2 (#39971) release(core): 1.6.2 (#39967) fix(core): shore up indexing in genai v1 streaming content (#39964) fix(core): make StructuredTool JSON-serializable (#39631) chore(deps): bump minor and patch dependencies (#39869) release(core): 1.6.1 (#39832) feat(core): propagate gateway information on error path (#39829)

langchain-core==1.6.0

Changes since langchain-core==1.5.6

release(core): 1.6.0 (#39760) fix(core): resolve postponed annotations in StructuredTool._injected_args_keys (#39602) feat(core): add standard model exception types (#39538) fix(core): allow deserializing RunnablePick (#39753) fix(core): make convert_to_openai_function handle callables and non-dict mappings (#39750) fix(core): make subprocess and temporary file tests portable on Windows (#39664) fix(core): fail fast when tool schemas can't resolve forward refs during serialization (#39570) test(core): avoid version-dependent runnable snapshots (#39705) fix(core): require all nested properties for strict tool schemas (#39306) fix(core): remove stale sync-stream xfail [closes #39720] (#39723) perf(core): Lazily import transformers (#38037) fix(core): accept non-dict Mapping values in mustache templates (#39680) docs(core): clarify Runnable pipe coercion [closes #39075] (#39707) fix(core): finalize chain-group runs on BaseException (#39699)

langchain-core==1.5.6

Changes since langchain-core==1.5.5

chore(core): release 1.5.6 (#39704) feat(core): incorporate gateway metadata to traces (#39703)

langchain-core==1.5.5

Changes since langchain-core==1.5.4

release(core): 1.5.5 (#39655) fix(core): make abatch_iterate consistent with batch_iterate for None and zero size (#39367) fix(core): respect pydantic aliases when validating tool inputs (#39572) fix(core): issues in merging chunks (#39535) fix(core): handle v1 base model validation in async path (#39576) fix(core): handle tool descriptions for infer_schema=False (#39573) fix(core): clear usage metadata callback on exceptions in context manager (#39616) fix(core): handle falsy LLM and chat model caches (#39283) chore(core): add httpx as an explicit dep (#39612) fix(core): preserve non-str/non-dict items in DictPromptTemplate list values (#39588) fix(core): raise ValueError when explicit tool_outputs length mismatches tool_calls in tool_example_to_messages (#39142) fix(core): guard malformed Anthropic content blocks (#38670)

... (truncated)

Commits

• 4fe9d30 chore(openai): fix tests (#39972)
• 8fa38dc revert: release(core): 1.6.2 (#39971)
• 122030d release(core): 1.6.2 (#39967)
• 7d4b42b release(langchain): 1.3.18 (#39966)
• 4a66e35 fix(langchain): preserve content-block shape in PIIMiddleware redaction (#39894)
• 38e2113 fix(core): shore up indexing in genai v1 streaming content (#39964)
• 13b1b2f fix(core): make StructuredTool JSON-serializable (#39631)
• 3b3b308 release(anthropic): 1.7.0 (#39963)
• e3f6adf feat(anthropic): support top-level param for skills via container; `updates...
• c253f54 fix(openai): correct reasoning_effort_levels for gpt-5 and gpt-5.1 profiles...
• Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

• Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
• set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
• dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
• Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638

Commits

• 49515af Bump version: 1.2.2 → 1.2.3
• 8ac846f chore: add release runbook (RELEASING.md) and make release target
• bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
• f7b18d9 fix: round-trip backslashes through set_key (#680)
• 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
• f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
• 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
• 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
• 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
• 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
• Additional commits viewable in compare view

Updates langchain-openai from 1.4.3 to 1.6.0

Release notes

Sourced from langchain-openai's releases.

langchain-openai==1.6.0

Changes since langchain-openai==1.5.2

release(openai): 1.6.0 (#39762) feat(core): add standard model exception types (#39538) fix(openai): raise clear error on unexpected response type in _create_chat_result (#39731)

langchain-openai==1.5.2

Changes since langchain-openai==1.5.1

release(openai): 1.5.2 (#39719) fix(openai): preserve reasoning item boundaries (#39278) release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710)

langchain-openai==1.5.2a1

Initial release

release(openai): 1.5.2a1 (#39709) feat(openai): extract gateway metadata from response headers when available (#39706) chore(openai): update snapshots (#39657) fix(openai): support o-series models in get_num_tokens_from_messages (#38710) release(openai): 1.5.1 (#39653) fix(openai): preserve streamed encrypted reasoning (#39635) chore(infra): support langsmith gateway in CI (#39651) release(openai): 1.5.0 (#39629) feat(openai): support openai 3.0 SDK (#39613) chore(partners): bump langgraph floor in openai and huggingface lockfiles (#39617) release(openai): 1.4.3 (#39485) fix(openai): filter invalid tool calls from content (#39366) chore(openai): update guidance for responses API for OpenAI-compatible providers (#39327) chore(openai): update docstring for include_response_headers (#39326) release(openai): 1.4.2 (#39322) fix(openai): handle ContextWindowExceededError (#39300) chore: bump the minor-and-patch group across 3 directories with 7 updates (#39187) fix(openai): filter langchain-generated content block IDs (#39209) fix(openai): preserve Responses text options (#39204) fix(openai): redact MCP authorization (#39155) chore(model-profiles): refresh model profile data (#39050) release(openai): 1.4.1 (#39045) feat(anthropic,fireworks,openai): support langsmith gateway through env var (#38742) fix(openai): correct gpt-5.3-chat-latest profile (#39009) release(openai): 1.4.0 (#38983) chore: bump pillow from 12.2.0 to 12.3.0 in /libs/partners/openai (#38999) feat(core): add reasoning_effort as a standard chat model parameter (#38887) chore(model-profiles): refresh model profile data (#38797) release(openai): 1.3.5 (#38785) feat(openai): support explicit prompt caching (#38762)

... (truncated)

Commits

• 3478c28 release(anthropic): 1.6.0 (#39763)
• 420dfc9 release(openai): 1.6.0 (#39762)
• 85602c3 release(core): 1.6.0 (#39760)
• 5c3538e fix(core): resolve postponed annotations in `StructuredTool._injected_args_ke...
• 9984a87 feat(core): add standard model exception types (#39538)
• b3e9eef chore(model-profiles): refresh model profile data (#39751)
• ded2a1f fix(core): allow deserializing RunnablePick (#39753)
• 04ae744 fix(core): make convert_to_openai_function handle callables and non-dict ma...
• 37f2662 feat(langchain): support custom token_counter in ContextEditingMiddleware (#3...
• 2019bf5 fix(openai): raise clear error on unexpected response type in `_create_chat_r...
• Additional commits viewable in compare view

Updates tiktoken from 0.13.0 to 0.14.0

Changelog

Sourced from tiktoken's changelog.

[v0.14.0]

• Build wheels for Python 3.15
• Support looking up more GPT-5 series models
• Upgrade dependencies

Commits

• 4e71bbe Release 0.14.0 (#597)
• 212b893 Fail open for GPT-5 model tokenisers (#596)
• 4187ba3 Upgrade dependencies (#595)
• 92a8255 Remove test-skip comment for macOS arm64 (#562)
• 674f5e6 Build Python 3.15 (#594)
• dbea866 Remove deprecated freethreading build
• f678224 Update cibuildwheel
• 08a5f3b ci: use static artifact name for sdist build job (#535)
• See full diff in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Commits

• 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
• 558379f Bump twine to v7.0.0
• 2cfd5d3 Do not check for docs build
• a735bee Fix more Clippy lints
• 7eed4a1 Fix Clippy 0.1.95 warnings
• b353bbb Prepare release v2.13.5
• 63d2ccc Count validated model fields once in smart unions
• a53ec2e Speed up PyPy CI tests
• d65e0f9 Workaround circular import error in Mypy
• 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
• Additional commits viewable in compare view

Updates spacy from 3.8.14 to 3.8.16

Release notes

Sourced from spacy's releases.

v3.8.16

No release notes provided.

v3.8.15: Fix click requirement

Typer removed click as a dependency in favour of vendoring it, but spaCy imports from Click, so the requirement needs to be added.

Commits

• 26b4d1d Remove publish_pypi workflow
• aed14d1 Increment version
• 66d2948 Fix build directory [ci skip]
• ca59885 Improve bandwidth usage on Netlify (#14024) [ci skip]
• f69c32f Install click with previous spaCy in upgrade test
• 29bc4f2 Fix release smoke/upgrade tests
• 86edb26 Build linux wheels in manylinux_2_28 containers
• 7a64151 Cap hypothesis below 6.156 to keep win_arm64 wheel builds working
• 768e8d5 Fix CI: bump mypy pin for numpy 2.5 stubs, sync confection pin
• edd3d0f Format tests README code blocks for ruff 0.16 markdown formatting
• Additional commits viewable in compare view

Updates mcp from 2.0.0 to 2.1.1

Release notes

Sourced from mcp's releases.

v2.1.1

What's Changed

• Point imports of mcp.server.fastmcp at the migration guide by @​maxisbey in modelcontextprotocol/python-sdk#3388

Full Changelog: modelcontextprotocol/python-sdk@v2.1.0...v2.1.1

v2.1.0

Highlights

• Client accepts StdioServerParameters directly: Client(StdioServerParameters(command="uv", args=["run", "server.py"])) (#3321).
• Prompt messages accept Image and Audio, prompt functions may return bare content blocks, and Message / UserMessage / AssistantMessage are exported from mcp.server.mcpserver (#3320).
• The 4 MiB request body limit now also covers the SSE transport and the OAuth endpoints; SseServerTransport and MCPServer.sse_app() take max_request_body_size, and the SSE message endpoint answers 405 to non-POST requests (#3336).

Behaviour changes to be aware of

• Handler exceptions (#3314): an unexpected exception from a tool, resource or prompt handler is logged once at ERROR with its traceback, and the client now sees only Error executing tool <name> (or the resource/prompt equivalent) rather than the exception text. Raise ToolError / ResourceError when the message is meant for the model; those still reach the client and are logged at INFO without a traceback.
• Content-block return annotations (#3320): a tool annotated to return TextContent, EmbeddedResource, Image, Audio, or lists/unions of them no longer advertises outputSchema or returns structuredContent; its content is unchanged. Pass structured_output=True to keep the previous shape.

Fixes

• TypedDict tool results: NotRequired keys are omitted instead of serialized as null, and registration no longer fails on Python 3.10 (#3224, #3227); recursive return types get an object-rooted outputSchema that pre-2026 clients accept (#3337).
• 2026-07-28 over HTTP: a POSTed notification such as notifications/cancelled is acknowledged with 202 instead of rejected with 400 (#3324).
• Pre-2026 sessions ignore cache-hint fields from later revisions instead of failing list_tools() (#3223), and accept boolean sub-schemas in tool schema properties (#3353).
• mcp install reads and preserves a Claude Desktop config containing non-ASCII text on any Windows code page (#3296).

What's Changed

• Retire wording tied to pre-2.0 milestones by @​maxisbey in modelcontextprotocol/python-sdk#3211
• Describe the maintenance line without hardcoding 1.28 by @​maxisbey in modelcontextprotocol/python-sdk#3212
• Ask which release line a bug report is on by @​maxisbey in modelcontextprotocol/python-sdk#3213
• Link the released 2026-07-28 spec and point migrators at /v1/ by @​maxisbey in modelcontextprotocol/python-sdk#3214
• Bump conformance harness to 0.2.0-alpha.11 by @​maxisbey in modelcontextprotocol/python-sdk#3282
• Read UTF-8 test fixtures with explicit encoding by @​ShuQingDollarVoyager in modelcontextprotocol/python-sdk#3245
• Pin each conformance leg to a spec-revision wire by @​maxisbey in modelcontextprotocol/python-sdk#3304
• docs: publish translated docs in twelve languages and the tool that maintains them by @​maxisbey in modelcontextprotocol/python-sdk#3280
• Pin text I/O to UTF-8 and fail CI on locale-dependent reads/writes by @​maxisbey in modelcontextprotocol/python-sdk#3296
• docs: lead the README client example with a URL, not the server object by @​maxisbey in modelcontextprotocol/python-sdk#3315
• Publish versioning, roadmap, and dependency policies for v2 by @​maxisbey in modelcontextprotocol/python-sdk#3215
• Drop later-revision cache-hint fields on pre-2026 sessions by @​maxisbey in modelcontextprotocol/python-sdk#3223
• Stop framing breaking changes as a workflow in AGENTS.md by @​maxisbey in modelcontextprotocol/python-sdk#3286
• MCPServer: content-block returns are unstructured, prompt messages take Image/Audio by @​maxisbey in modelcontextprotocol/python-sdk#3320
• Let Client take StdioServerParameters directly by @​maxisbey in modelcontextprotocol/python-sdk#3321
• Gate external PRs on an assigned, linked issue by @​maxisbey in modelcontextprotocol/python-sdk#3291
• docs: cover the remaining Tier 1 audit items by @​maxisbey in modelcontextprotocol/python-sdk#3325
• Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry by @​maxisbey in modelcontextprotocol/python-sdk#3326
• Shorten stdio test comments by @​Kludex in modelcontextprotocol/python-sdk#3329
• Hand TypedDict tool results to pydantic natively by @​maxisbey in modelcontextprotocol/python-sdk#3331
• Apply the request body limit to the SSE and OAuth endpoints by @​maxisbey in modelcontextprotocol/python-sdk#3336
• Accept boolean sub-schemas in 2025-11-25 tool schema properties by @​pja-ant in modelcontextprotocol/python-sdk#3354
• Log MCPServer handler exceptions by kind and keep crash details off the wire by @​maxisbey in modelcontextprotocol/python-sdk#3314

... (truncated)

Commits

• 0921d94 Point imports of mcp.server.fastmcp at the migration guide (#3388)
• 4d6f87e Build releases with the pinned hatchling and a publish action that accepts Me...
• c5d7d0b docs: refresh translations for recent English changes (#3379)
• d8b6383 Give recursive tool return types an object-rooted output schema (#3376)
• 56af447 Log MCPServer handler exceptions by kind and keep crash details off the wire ...
• f1c40b0 Accept boolean sub-schemas in 2025-11-25 tool schema properties (#3354)
• 57394b0 Apply the request body limit to the SSE and OAuth endpoints (#3336)
• 0cee624 Hand TypedDict tool results to pydantic natively (#3331)
• 0d92192 Shorten stdio test comments (#3329)
• b2025ab Acknowledge notification POSTs with 202 on the 2026-07-28 HTTP entry (#3326)
• Additional commits viewable in compare view

Updates pypdf from 6.15.0 to 6.16.2

Release notes

Sourced from pypdf's releases.

Version 6.16.2, 2026-08-23

What's new

Bug Fixes (BUG)

• Make remove_from_tree() work on outline items (#3939) by @​RISHIKKASULA
• Be more lenient about space width in layout mode text extraction (#3992) by @​PJBrs
• Do not scale the text leading by the font size (#3987) by @​matthewkogan
• Update annotation appearance stream matrix on page transform (#3968) by @​BashfulHippo
• Allow repeated page references (#3959) by @​yuming-long

Robustness (ROB)

• Improve RC4 fallback when cryptography can't provide it (#3853) by @​msylw

Full Changelog

Version 6.16.1, 2026-08-14

What's new

Security (SEC)

• Limit iterations for outline retrieval and XForm text extraction (#3966) by @​stefan6419846

Full Changelog

Version 6.16.0, 2026-08-13

What's new

Security (SEC)

• Detect cycles in TreeObject.insert_child (#3964) by @​stefan6419846

New Features (ENH)

• AppearanceStream: Allow arbitrary rotations and apply rotations for annotation appearance streams (#3917) by @​PJBrs
• AppearanceStream: Consider more encodings for Type1 core fonts (#3905) by @​PJBrs

Performance Improvements (PI)

• Build /ToUnicode source-code bytes directly in parse_bfrange (#3952) by @​Anai-Guo

Bug Fixes (BUG)

• Preserve internal Link annotations when appending/merging (#3953) (#3954) by @​Anai-Guo
• Fix false inline image end markers (#3922) by @​ciphercom
• Reject typeless non-page /Kids entries in strict mode (#3955) by @​Anai-Guo
• Apply character spacing (Tc) per glyph in layout-mode extraction (#3951) by @​Anai-Guo
• Keep the Adobe CMYK inversion when an explicit /Decode is present (#3943) by @​RavSinghChandan

Robustness (ROB)

• AppearanceStream: Only escape parentheses for 8-bit fonts (#3961) by @​PJBrs
• Recover the trailer from a cross-reference stream when rebuilding the xref (#3950) by @​Anai-Guo

Maintenance (MAINT)

• Deduplicate CatalogAttributes and CatalogDictionary (#3940) by @​j-t-1

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.16.2, 2026-08-23

Bug Fixes (BUG)

• Make remove_from_tree() work on outline items (#3939)
• Be more lenient about space width in layout mode text extraction (#3992)
• Do not scale the text leading by the font size (#3987)
• Update annotation appearance stream matrix on page transform (#3968)
• Allow repeated page references (#3959)

Robustness (ROB)

• Improve RC4 fallback when cryptography can't provide it (#3853)

Full Changelog

Version 6.16.1, 2026-08-14

Security (SEC)

• Limit iterations for outline retrieval and XForm text extraction (#3966)

Full Changelog

Version 6.16.0, 2026-08-13

Security (SEC)

• Detect cycles in TreeObject.insert_child (#3964)

New Features (ENH)

• AppearanceStream: Allow arbitrary rotations and apply rotations for annotation appearance streams (#3917)
• AppearanceStream: Consider more encodings for Type1 core fonts (#3905)

Performance Improvements (PI)

• Build /ToUnicode source-code bytes directly in parse_bfrange (#3952)

Bug Fixes (BUG)

• Preserve internal Link annotations when appending/merging (#3953) (#3954)
• Fix false inline image end markers (#3922)
• Reject typeless non-page /Kids entries in strict mode (#3955)
• Apply character spacing (Tc) per glyph in layout-mode extraction (#3951)
• Keep the Adobe CMYK inversion when an explicit /Decode is present (#3943)

Robustness (ROB)

• AppearanceStream: Only escape parentheses for 8-bit fonts (#3961)
• Recover the trailer from a cross-reference stream when rebuilding the xref (#3950)

Maintenance (MAINT)

• Deduplicate CatalogAttributes and CatalogDictionary (#3940)

Code Style (STY)

• Type pages as a Sequence rather than a list (#3957)

... (truncated)

Commits

• 1da0987 REL: 6.16.2
• f6853cc BUG: Make remove_from_tree() work on outline items (#3939)
• c6d38af BUG: Type character widths as float (#3996)
• 882b3b2 STY: Type the XMP stream as StreamObject rather than ContentStream (#3995)
• 4c8f707 STY: Accept any sequence of fit arguments in Fit (#3990)
• 2450321 STY: Accept any sequence as the annotation border (#3991)
• 2dcab8d MAINT: Skip test_appearance_stream_rtl when RTL support is unavailable (#3993)
• 412975a BUG: Be more lenient about space width in layout mode text extraction (#3992)
• ddbfea9 BUG: Interpolate the reader in the reset_translation error message (#3981)
• c646ef2 ROB: Improve RC4 fallback when cryptography can't provide it (#3853)
• Additional commits viewable in compare view

Updates nltk from 3.10.2 to 3.10.3

Release notes

Sourced from nltk's releases.

v3.10.3

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

• Sandbox Stanford JAR execution to nltk_data directories by @​ekaf in nltk/nltk#3743
• docs: wrap Chat-80 HOWTO output by @​medisean in nltk/nltk#3741
• ci: sandboxed-open guard + stabilize security tests across platforms/pythons (#3740) by @​alvations in nltk/nltk#3744
• Prepare release 3.10.3 by @​ekaf in nltk/nltk#3745

New Contributors

• @​medisean made their first contribution in nltk/nltk#3741

Full Changelog: nltk/nltk@v3.10.2...v3.10.3

v3.10.3-rc1

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

• Sandbox Stanford JAR execution to nltk_data directories by @​ekaf in nltk/nltk#3743
• docs: wrap Chat-80 HOWTO output by @​medisean in nltk/nltk#3741

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

Version 3.10.2 2026-08-05

• Remove inisec.py and document PYTHONSAFEPATH instead
• Skip draft step in release workflow
• Fix symlink escape in FramenetCorpusReader (CWE-59)
• Guard tempfile.gettempdir() when building pathsec allowed roots
• add tests for transitive_closure

Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan

Version 3.10.1 2026-07-29

• Expand ~ in env-var paths
• Validate types after WordNet app pickle deserialization
• Fix uncontrolled search path in HunposTagger
• Use exact thirds in masi_distance
• Avoid retaining bllip import exceptions
• Fix word_tokenize: pad opening single quote before multi-letter words.
• Implement Tree.pformat_latex_forest.
• Prevent module hijacking in inline imports.
• Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

• Enforce the stricter nl...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.