chore(deps): bump nltk from 3.9.4 to 3.10.0 in /envs/openapp_env - #1079
chore(deps): bump nltk from 3.9.4 to 3.10.0 in /envs/openapp_env#1079dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [nltk](https://github.com/nltk/nltk) from 3.9.4 to 3.10.0. - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](nltk/nltk@3.9.4...v3.10.0) --- updated-dependencies: - dependency-name: nltk dependency-version: 3.10.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
Dependencies
python:uv
|
The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Alignment Review Report
Scope: this PR changes only envs/openapp_env/uv.lock (0 Python files) — a Dependabot transitive-dependency lock refresh bumping nltk 3.9.4 → 3.10.0 and adding one new transitive dep, defusedxml 0.7.1.
Automated Checks
- Lint: PASS (for this PR).
.claude/hooks/lint.shexits non-zero, but every flagged file is a pre-existingenvs/**formatting drift (opencode_env, pi_env, chat_env, coding_tools_env, …) — none are in this PR's diff, which contains no Python.uv.lock/TOML are not linted. - Debug code: CLEAN.
.claude/hooks/check-debug.shscanssrc/only; this PR touches neithersrc/nor any.py.
Open RFCs Context
000/001/002/003/005 In Review, 004 (Rubrics, no status header), 010 Draft. None govern dependency/packaging management → a lock bump touches no RFC surface.
Tier 1: Fixes Required
- None. The lock is internally consistent and valid.
Tier 2: Alignment Discussion
Principle Conflicts: None identified. No Gymnasium API, reward, client-server, MCP/WebSocket, or credential surface is touched.
RFC Conflicts: None identified. No RFC covers packaging / dependency management / PyPI resolution.
Lock-hygiene verification
- Transitive, not direct:
nltkis pulled bylibvisualwebarena+libwebarena(viabrowsergym); it is not pinned inpyproject.toml, so a lock-only change with nopyprojectedit is correct. - Package-set delta: only
defusedxml 0.7.1added andnltk 3.9.4 → 3.10.0changed; nothing removed (162 → 163 pkgs). No other package's wheels/sdists changed. - Hashes verified against PyPI (real + matching): nltk 3.10.0 wheel
54ff84d4…244bf, sdist4fbac1d9…e8c1; defusedxml 0.7.1 wheela352e7e4…8a61, sdist1bb3032d…3e69. Neither yanked. - Constraints: nltk 3.10.0
requires-python >=3.10⊇ env>=3.11,<3.14✓; new runtime depdefusedxmlpresent ✓. - Born clean:
revision = 3unchanged, zero HF-mirror refs at base and head → no index-flip and no revision-bump side effects this time. - CI
validate-env-locksreproduced locally:uv sync --project envs/openapp_env --frozen --all-extras --all-groups --dry-run --no-install-projectpasses.
🔐 Security-positive
nltk 3.9.4 carries 4 distinct CVEs, all fixed_in: 3.10.0:
| CVE | Class | Component |
|---|---|---|
| CVE-2026-12243 | Path traversal (percent-encoded) | nltk.data.load()/find() |
| CVE-2026-12074 | Path traversal (pathsec bypass) | FramenetCorpusReader.frame() |
| CVE-2026-12075 | SSRF (DNS-rebinding) | nltk.pathsec |
| CVE-2026-12061 | ReDoS (quadratic backtracking) | ReviewsCorpusReader |
nltk 3.10.0 has no known advisories; the new defusedxml runtime dep is part of nltk's XML hardening.
Non-blocking notes (FYI)
- Incidental marker churn: the diff also normalizes environment markers on the CUDA/nvidia/tifffile transitive tree (e.g. dropping the
sys_platform == 'linux'/!= 'emscripten'/'win32'guards). This is a re-resolution artifact of Dependabot's uv version — no package artifacts changed, and the effective resolution on the linux x86_64/aarch64 deploy target is unchanged (the broadened markers would only matter on non-linux platforms this Docker env doesn't target). - Lock is not build-consumed:
envs/openapp_env/server/Dockerfileinstalls viapip install -e .(lines 79/91), notuv sync --frozen, souv.lockgoverns dev/CI reproducibility only — the marker/lock changes have no effect on the deployed image. - Dependabot config mismatch (recurring): this native
dependabot/uv/envs/openapp_env/…PR modifiesenvs/**even though.github/dependabot.ymlsetsexclude-paths: ["envs/**"]on theuvupdater (lines 8-9). The key is valid but theuvecosystem isn't honoring it (platform limitation); the intended channel is the aggregatedcodex/dependabot-envs-*roll-ups. cc @burtenshaw — not a blocker.
Summary
- 0 mechanical issues to fix
- 0 principle conflicts, 0 RFC conflicts
- 1 recurring process note (exclude-paths bypass, @burtenshaw)
- Security-positive (4 CVEs fixed). Looks safe to merge from a review standpoint.
Sent by Cursor Automation: Pre-review
| [[package]] | ||
| name = "nltk" | ||
| version = "3.9.4" | ||
| version = "3.10.0" |
There was a problem hiding this comment.
✅ Security-positive bump. nltk 3.9.4 → 3.10.0 fixes 4 CVEs (all fixed_in: 3.10.0): CVE-2026-12243 & CVE-2026-12074 (path traversal in nltk.data.load/find and FramenetCorpusReader.frame), CVE-2026-12075 (DNS-rebinding SSRF in nltk.pathsec), CVE-2026-12061 (ReDoS in ReviewsCorpusReader). Wheel/sdist sha256 verified against PyPI and matching; not yanked. requires-python >=3.10 is satisfied by the env's >=3.11,<3.14.
| ] | ||
|
|
||
| [[package]] | ||
| name = "defusedxml" |
There was a problem hiding this comment.
New transitive dependency introduced by nltk 3.10.0 (its requires-dist now lists defusedxml), part of nltk's XML-parsing hardening. Pinned to the current stable 0.7.1; wheel/sdist sha256 verified against PyPI, no known advisories. Benign addition.
| source = { registry = "https://pypi.org/simple" } | ||
| dependencies = [ | ||
| { name = "cuda-pathfinder", marker = "sys_platform != 'emscripten' and sys_platform != 'win32'" }, | ||
| { name = "cuda-pathfinder" }, |
There was a problem hiding this comment.
FYI (no action needed) — representative of incidental environment-marker normalization across the CUDA/nvidia/tifffile tree in this diff (here the sys_platform != 'emscripten' and != 'win32' guard was dropped). These are uv re-resolution artifacts, not package changes: no wheels/sdists changed, and the resolution on the linux x86_64/aarch64 deploy target is unchanged.
|
Closed in favor of the env Dependabot aggregate PR #1015. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
1 participant
Bumps nltk from 3.9.4 to 3.10.0.
Release notes
Sourced from nltk's releases.
... (truncated)
Changelog
Sourced from nltk's changelog.
... (truncated)
Commits
bd49f90allow escaped brackets in Tree.fromstring (#3694)27b8ad6don't crash chomsky_normal_form on terminals with siblings (#3693)52227d2Use os.name for Windows path handling (#3605)06c0e2cAvoid RIBES zero division on empty inputs (#3604)a167389Treat missing unzip output as stale (#3607)c94c967Fix EOF empty document bug in IEER corpus reader (#3648)94a259cEnforce restrictive primitive type checking in pathsec wrappers (#3692)5ac475dfix(security): isolate Stanford Java options and clean temp files (#3683)986f26eci(deps): bump the github-actions group with 3 updates (#3691)f26b375fix(security): prevent pickle RCE in TransitionParser model loading (CWE-502)...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
NLTK 3.10 enforces stricter default security around downloads and corpus I/O, which can change behavior in WebArena eval paths that rely on NLTK without touching app code.
Overview
Updates
envs/openapp_env/uv.lockto resolve NLTK 3.9.4 → 3.10.0, pulled in by the WebArena-related packages (libwebarena/libvisualwebarena).The lock refresh also records NLTK’s new dependency on
defusedxml(XML hardening in 3.10) and includes incidental marker normalization for CUDA/NVIDIA andtifffileentries from the sameuvresolve—no application source changes.3.10 tightens default resource/downloader security (
pathsec, traversal/SSRF mitigations, safer XML parsing). Worth a quick smoke pass on any flows that use NLTK corpora,nltk.download, or customnltk:resource paths in the open-app env.Reviewed by Cursor Bugbot for commit ceb130a. Bugbot is set up for automated code reviews on this repo. Configure here.