From 0f68c50ff5558bb34e3a129eeb6ebe4ff12b4651 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 1 Sep 2026 21:22:52 +0000
Subject: [PATCH] chore(deps): bump nltk in the pip group across 1 directory

Bumps the pip group with 1 update in the / directory: [nltk](https://github.com/nltk/nltk).


Updates `nltk` from 3.10.0 to 3.10.3
- [Release notes](https://github.com/nltk/nltk/releases)
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](https://github.com/nltk/nltk/compare/v3.10.0...v3.10.3)

---
updated-dependencies:
- dependency-name: nltk
  dependency-version: 3.10.3
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 poetry.lock    | 8 ++++----
 pyproject.toml | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index 035f73d..f33be40 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -3514,14 +3514,14 @@ test-extras = ["pytest-mpl", "pytest-randomly"]
 
 [[package]]
 name = "nltk"
-version = "3.10.0"
+version = "3.10.3"
 description = "Natural Language Toolkit"
 optional = false
 python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "nltk-3.10.0-py3-none-any.whl", hash = "sha256:54ff84d4916d3ef127e8953bee0023f6a6b320b75d634a19e06ef056d3d244bf"},
-    {file = "nltk-3.10.0.tar.gz", hash = "sha256:4fbac1d98203cbcd1b5d94a2877fb822300072d80604a5e7fae49d2c5f84e8c1"},
+    {file = "nltk-3.10.3-py3-none-any.whl", hash = "sha256:ff9598a8e20518ee0d557745890cc4435b9578489e2dcbc69c4f81fa060caf7c"},
+    {file = "nltk-3.10.3.tar.gz", hash = "sha256:bb9327a461c3811c2fa4900e03840401f2126adfb30c0072827c433bd2444ea4"},
 ]
 
 [package.dependencies]
@@ -7797,4 +7797,4 @@ cffi = ["cffi (>=1.17,<2.0) ; platform_python_implementation != \"PyPy\" and pyt
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.12,<3.13"
-content-hash = "a99134c05bf50e6ba689a46697425f16bccb606a40730c89c29260996f941aed"
+content-hash = "b1bb1f97a9194617b0b0f91fa355fbd819b69f71bb899596403a5b959780df1f"
diff --git a/pyproject.toml b/pyproject.toml
index 1f4082b..923a30c 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -84,7 +84,7 @@ dependencies = [
     "urllib3>=2.7.0",              # 4 advisories (decompression bombs, cross-origin header leak)
     "pillow>=12.3.0",              # 13 advisories (PSD/FITS/font OOB writes, heap corruption)
     "pypdf>=6.15.0",               # 15 advisories (RAM-exhaust, infinite-loop, /ToUnicode and CID-width DoS)
-    "nltk>=3.10.0",                # 1 critical zip slip + 4 high (downloader path traversal, AFO, XSS)
+    "nltk>=3.10.3",                # 1 critical zip slip + 4 high (downloader path traversal, AFO, XSS)
     # LangChain ecosystem on 1.x — unlocked by langfair-mantric@python-3.12-support
     # which now allows langchain >=0.3.7,<2.0 (only imports langchain_core, which is
     # API-compatible across the 0.3 -> 1.x transition).