chore(deps): bump nltk from 3.10.0 to 3.10.3 in the pip group across 1 directory

[dependabot]

Bumps the pip group with 1 update in the / directory: nltk.

Updates nltk from 3.10.0 to 3.10.3

Release notes

Sourced from nltk's releases.

v3.10.3

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

• Sandbox Stanford JAR execution to nltk_data directories by @​ekaf in nltk/nltk#3743
• docs: wrap Chat-80 HOWTO output by @​medisean in nltk/nltk#3741
• ci: sandboxed-open guard + stabilize security tests across platforms/pythons (#3740) by @​alvations in nltk/nltk#3744
• Prepare release 3.10.3 by @​ekaf in nltk/nltk#3745

New Contributors

• @​medisean made their first contribution in nltk/nltk#3741

Full Changelog: nltk/nltk@v3.10.2...v3.10.3

v3.10.3-rc1

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

• Sandbox Stanford JAR execution to nltk_data directories by @​ekaf in nltk/nltk#3743
• docs: wrap Chat-80 HOWTO output by @​medisean in nltk/nltk#3741

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

Version 3.10.2 2026-08-05

• Remove inisec.py and document PYTHONSAFEPATH instead
• Skip draft step in release workflow
• Fix symlink escape in FramenetCorpusReader (CWE-59)
• Guard tempfile.gettempdir() when building pathsec allowed roots
• add tests for transitive_closure

Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan

Version 3.10.1 2026-07-29

• Expand ~ in env-var paths
• Validate types after WordNet app pickle deserialization
• Fix uncontrolled search path in HunposTagger
• Use exact thirds in masi_distance
• Avoid retaining bllip import exceptions
• Fix word_tokenize: pad opening single quote before multi-letter words.
• Implement Tree.pformat_latex_forest.
• Prevent module hijacking in inline imports.
• Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

• Enforce the stricter nltk.pathsec security policy by default
• Document the new security model and migration guidance
• Harden resource loading against path traversal and SSRF/DNS-rebinding
• Harden downloader path handling and block XML entity expansion
• Close remaining corpus-reader security edge cases
• Replace unsafe exec() usage in the utility CLI

... (truncated)

Commits

• 303f6e2 Prepare release 3.10.3 (#3745)
• cf2aaac Merge pull request #3744 from alvations/ci-guard-open
• 6cd8320 test: robustness on Python 3.14 / 3.14t CI (UnicodeDecodeError + timing flake)
• e965330 fix: perceptron save_to_json breaks on Windows (os.open can't fd-open a direc...
• df1bb4c test: make pathsec security tests platform-independent (fix Linux/Windows CI)
• 0e5c7be ci: guard against un-sandboxed open() in sandbox-sensitive modules (#3740)
• 5017826 Merge commit from fork
• 40d0f06 Triple-check hardening: perceptron TOCTOU squat, pathsec fd-leak, bcp47 entit...
• 483c5fe Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + s...
• 722778f Merge commit from fork
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.