From df8da87c08f9cc9a379a05512e31ea669a98dea0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 09:18:49 +0000 Subject: [PATCH] chore(deps): bump the minor-and-patch group across 1 directory with 7 updates Bumps the minor-and-patch group with 7 updates in the /nlp-service directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.141.1` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.51.0` | `0.52.3` | | [markitdown](https://github.com/microsoft/markitdown) | `0.1.6` | `0.1.7` | | [google-genai](https://github.com/googleapis/python-genai) | `2.11.0` | `2.18.1` | | [spacy](https://github.com/explosion/spaCy) | `3.8.14` | `3.8.15` | | [sentence-transformers](https://github.com/huggingface/sentence-transformers) | `5.6.0` | `5.7.0` | | [nltk](https://github.com/nltk/nltk) | `3.10.0` | `3.10.3` | Updates `fastapi` from 0.139.0 to 0.141.1 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.139.0...0.141.1) Updates `uvicorn` from 0.51.0 to 0.52.3 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.51.0...0.52.3) Updates `markitdown` from 0.1.6 to 0.1.7 - [Release notes](https://github.com/microsoft/markitdown/releases) - [Commits](https://github.com/microsoft/markitdown/compare/v0.1.6...v0.1.7) Updates `google-genai` from 2.11.0 to 2.18.1 - [Release notes](https://github.com/googleapis/python-genai/releases) - [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md) - [Commits](https://github.com/googleapis/python-genai/compare/v2.11.0...v2.18.1) Updates `spacy` from 3.8.14 to 3.8.15 - [Release notes](https://github.com/explosion/spaCy/releases) - [Changelog](https://github.com/explosion/spaCy/blob/master/RELEASE_NOTES.md) - [Commits](https://github.com/explosion/spaCy/compare/release-v3.8.14...release-v3.8.15) Updates `sentence-transformers` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/huggingface/sentence-transformers/releases) - [Commits](https://github.com/huggingface/sentence-transformers/compare/v5.6.0...v5.7.0) Updates `nltk` from 3.10.0 to 3.10.3 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](https://github.com/nltk/nltk/compare/v3.10.0...v3.10.3) --- updated-dependencies: - dependency-name: fastapi dependency-version: 0.141.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: uvicorn dependency-version: 0.52.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: markitdown dependency-version: 0.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: google-genai dependency-version: 2.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: spacy dependency-version: 3.8.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sentence-transformers dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: nltk dependency-version: 3.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- nlp-service/requirements.txt | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/nlp-service/requirements.txt b/nlp-service/requirements.txt index fcf249a..4c7e201 100644 --- a/nlp-service/requirements.txt +++ b/nlp-service/requirements.txt @@ -1,30 +1,30 @@ # Kompl v2 nlp-service — commit 4. Pins per docs/research/2026-04-08-conversion-deps.md # and docs/research/2026-04-09-llm-compile.md. -fastapi==0.139.0 -uvicorn[standard]==0.51.0 +fastapi==0.141.1 +uvicorn[standard]==0.52.3 pydantic==2.13.4 httpx==0.28.1 -markitdown[all]==0.1.6 +markitdown[all]==0.1.7 # Promoted to a direct dep so routers/conversion.py can call # youtube-transcript-api WITHOUT going through MarkItDown for YouTube URLs. # Reason: MarkItDown's YouTubeConverter silently falls back to scraping the # watch-page HTML when no transcript exists (returns ~800 chars of footer # chrome — verified live on session 4a00f339). We need the transcript-vs-no- # transcript signal explicitly, which only the direct API exposes. -# markitdown[all]==0.1.6 constrains ~=1.0.0; Dockerfile upgrades to 1.2.x +# markitdown[all]==0.1.7 constrains ~=1.0.0; Dockerfile upgrades to 1.2.x # after pip install (1.0.x breaks on current YouTube timedtext responses). youtube-transcript-api~=1.0.0 # Commit 4: LLM compile. Use google-genai NOT google-generativeai (deprecated 2025-Q1). -google-genai==2.11.0 +google-genai==2.18.1 # Commit 4: async token-bucket rate limiter. Single uvicorn worker only — # InMemoryBucket is process-local; see research artifact section 3. pyrate-limiter==3.9.0 # Part 2a: multi-layer NLP extraction pipeline. -spacy==3.8.14 +spacy==3.8.15 rake-nltk==1.0.6 yake==0.7.3 keybert==0.9.0 -sentence-transformers==5.6.0 +sentence-transformers==5.7.0 # Dockerfile pins torch==2.6.0 (CPU wheel). torch 2.5.1 breaks transformers # 5.x imports; torch >=2.7 breaks sentence-transformers meta-device init # (NotImplementedError on .to(device)). @@ -35,7 +35,7 @@ transformers==5.9.0 pytextrank==3.3.0 scikit-learn==1.9.0 # nltk: required by rake-nltk (stopwords + punkt tokenizer data). -nltk==3.10.0 +nltk==3.10.3 # Part 2b: fast Levenshtein/Jaro-Winkler matching for entity resolution. rapidfuzz>=3.14.5 # Recovers truncated JSON from Gemini 2.5 Flash repetition-loop bug