[dependabot]

Bumps nltk from 3.9.4 to 3.10.0.

Release notes

Sourced from nltk's releases.

v3.10.0

What's Changed

• Let TextCat.guess_language return None for ties by @​ekaf in nltk/nltk#3543
• Fix FunctionalCategory.substitute() ignoring substituted direction by @​elias-ba in nltk/nltk#3547
• Fix concurrent download race conditions with file-based locking by @​ekaf in nltk/nltk#3549
• Fix proxy settings ignored by pathsec.urlopen by @​ekaf in nltk/nltk#3552
• Fix CCG variable direction parsing pipeline by @​ekaf in nltk/nltk#3556
• Fix failing CCG unit tests by @​ekaf in nltk/nltk#3561
• Fix CCG variable capture, chart explosion, and type-raising scope bugs by @​ekaf in nltk/nltk#3557
• fix(security): block XML entity expansion (XXE) in downloader by @​scruge1 in nltk/nltk#3544
• Fix _create_token_table skipping last paragraph break transition + regression test by @​13rac1 in nltk/nltk#3553
• ci(deps): bump actions/github-script from 7 to 8 in the github-actions group by @​dependabot[bot] in nltk/nltk#3546
• Add HuggingFace datasets integration (nltk.huggingface) by @​alvations in nltk/nltk#3569
• fix PorterStemmer not using lowercased word in stem() for irregular forms in NLTK mode by @​Lemm1 in nltk/nltk#3568
• ci(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in nltk/nltk#3572
• Fix WordNetObject comparisons for incompatible types by @​ekaf in nltk/nltk#3570
• Align TnT with Brants (2000) specifications by @​jhnwnstd in nltk/nltk#3564
• Avoid KeyError in langnames.py by @​ekaf in nltk/nltk#3404
• Fix TransitionParser sparse index dtype for scikit-learn 1.9 by @​ekaf in nltk/nltk#3591
• Enable ENFORCE by default and harden downloader concurrency by @​ekaf in nltk/nltk#3593
• Use commonpath for downloader path containment on Windows by @​ekaf in nltk/nltk#3594
• Use lexical containment for downloader target paths by @​ekaf in nltk/nltk#3595
• fix(security): prevent DNS-rebinding SSRF in pathsec.urlopen by @​LinZiyuu in nltk/nltk#3582
• fix(security): block URL-encoded path traversal in nltk: resource URLs by @​LinZiyuu in nltk/nltk#3575
• fix(security): block path traversal in NKJPCorpusReader by @​LinZiyuu in nltk/nltk#3579
• fix(security): block path traversal in FramenetCorpusReader.frame() by @​LinZiyuu in nltk/nltk#3581
• fix(security): prevent ReDoS in ReviewsCorpusReader FEATURES regex (CWE-1333) by @​LinZiyuu in nltk/nltk#3583
• Fix remaining corpus reader pathsec gaps before ENFORCE=True RC by @​ekaf in nltk/nltk#3588
• Cache WordNet max depth lazily for lch_similarity() by @​ekaf in nltk/nltk#3592
• Fix remaining post-merge issues from #3477 and #3498 by @​ekaf in nltk/nltk#3599
• Replace unsafe exec() with importlib in utility CLI by @​ekaf in nltk/nltk#3609
• Document NLTK's new security policy by @​ekaf in nltk/nltk#3597
• Check that CI succeeded on the commit a release tag points to by @​ekaf in nltk/nltk#3506
• Prepare release metadata for 3.10.0 by @​ekaf in nltk/nltk#3610
• Fix release workflow CI check for tagged commits by @​ekaf in nltk/nltk#3611
• Fix perfect-agreement edge cases in agreement metrics by @​Muhtasim-Munif-Fahim in nltk/nltk#3608
• fix(security): prevent ReDoS in TextTilingTokenizer paragraph-break regex (CWE-1333) by @​LinZiyuu in nltk/nltk#3612
• fix(security): prevent ReDoS in SensevalCorpusReader _fixXML (CWE-400) by @​LinZiyuu in nltk/nltk#3614
• fix(security): resolve relative MaltParser dir via MALT_PARSER, not the CWD (CWE-426) by @​LinZiyuu in nltk/nltk#3616
• fix(security): bound LogicParser recursion depth to prevent uncaught RecursionError (CWE-674) by @​LinZiyuu in nltk/nltk#3617
• fix(security): resolve relative ReppTokenizer dir via REPP_TOKENIZER, not the CWD (CWE-427) by @​LinZiyuu in nltk/nltk#3618
• fix(security): do not load weka.jar from the CWD (CWE-494) by @​LinZiyuu in nltk/nltk#3620
• fix(security): do not run the senna binary from the CWD (CWE-829) by @​LinZiyuu in nltk/nltk#3621
• fix(security): prevent ReDoS in chunk tag-pattern parsing (CWE-1333) by @​LiteshGhute in nltk/nltk#3630
• Route _download_package() writes through pathsec.open by @​ekaf in nltk/nltk#3622
• fix(security): resolve symlinks in downloader containment check (CWE-59) by @​LinZiyuu in nltk/nltk#3619
• fix(security): use defusedxml in corpus readers to block XML entity-expansion DoS (CWE-776) by @​LinZiyuu in nltk/nltk#3615
• fix(security): stop exponential ReDoS in XMLCorpusView _VALID_XML_RE (CWE-1333) by @​LinZiyuu in nltk/nltk#3646
• fix(security): route read_sents through pathsec sentinel by @​ekaf in nltk/nltk#3626
• Add RELEASE-Github.md documentation by @​ekaf in nltk/nltk#3627

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.2 2026-08-05

• Remove inisec.py and document PYTHONSAFEPATH instead
• Skip draft step in release workflow
• Fix symlink escape in FramenetCorpusReader (CWE-59)
• Guard tempfile.gettempdir() when building pathsec allowed roots
• add tests for transitive_closure

Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan

Version 3.10.1 2026-07-29

• Expand ~ in env-var paths
• Validate types after WordNet app pickle deserialization
• Fix uncontrolled search path in HunposTagger
• Use exact thirds in masi_distance
• Avoid retaining bllip import exceptions
• Fix word_tokenize: pad opening single quote before multi-letter words.
• Implement Tree.pformat_latex_forest.
• Prevent module hijacking in inline imports.
• Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

• Enforce the stricter nltk.pathsec security policy by default
• Document the new security model and migration guidance
• Harden resource loading against path traversal and SSRF/DNS-rebinding
• Harden downloader path handling and block XML entity expansion
• Close remaining corpus-reader security edge cases
• Replace unsafe exec() usage in the utility CLI
• Warn on unpickling user-provided pickles
• Add HuggingFace datasets integration (nltk.huggingface)
• Align TnT with Brants (2000) specifications
• Fix PorterStemmer irregular-form lowercasing in NLTK mode
• Fix TransitionParser sparse index dtype for scikit-learn 1.9
• Fix TextCat tie handling
• Fix WordNet object comparisons for incompatible types
• Cache WordNet max depth lazily for lch_similarity()
• Fix CCG variable direction, substitution, and type-raising bugs
• Fix Jaro similarity for single-character and empty-string cases
• Improve CI and release-maintenance workflows

Thanks to the following contributors to 3.10.0: 13rac1, alvations, bowiechen, devesh-2002, ekaf, elias-ba, haosenwang1018, HyperPS, ihitamandal, jancallewaert, jhnwnstd,

... (truncated)

Commits

• bd49f90 allow escaped brackets in Tree.fromstring (#3694)
• 27b8ad6 don't crash chomsky_normal_form on terminals with siblings (#3693)
• 52227d2 Use os.name for Windows path handling (#3605)
• 06c0e2c Avoid RIBES zero division on empty inputs (#3604)
• a167389 Treat missing unzip output as stale (#3607)
• c94c967 Fix EOF empty document bug in IEER corpus reader (#3648)
• 94a259c Enforce restrictive primitive type checking in pathsec wrappers (#3692)
• 5ac475d fix(security): isolate Stanford Java options and clean temp files (#3683)
• 986f26e ci(deps): bump the github-actions group with 3 updates (#3691)
• f26b375 fix(security): prevent pickle RCE in TransitionParser model loading (CWE-502)...
• Additional commits viewable in compare view

[Paulo Lacerda (placerda)]

Dependabot (@dependabot) rebase

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

[Paulo Lacerda (placerda)]

Superseded by #381, which carries the identical uv.lock diff rebased onto develop.

Closing because GitHub Actions would not dispatch a check suite for this PR's head commit after it was retargeted from main to develop (confirmed via the /check-suites API across three separate pushes - no github-actions suite was ever created, so this PR only ever had license/cla). Merging it would have meant merging a dependency change with zero test coverage.

Context on why this landed on main in the first place: Dependabot security updates always target the repository default branch and ignore target-branch: develop in .github/dependabot.yml. That config is already correct for version updates; there is no setting that redirects security updates. Per docs/release-process.md this repo uses git-flow, and .github/workflows/ci.yml only runs on develop, so security PRs need to be retargeted (or re-cut) to get both the right base and any CI at all.