From aba3f723f768f35ee71a34ec23ef67deaf142a84 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Jul 2026 23:33:35 +0000
Subject: [PATCH] chore(deps): bump nltk from 3.9.4 to 3.10.0

Bumps [nltk](https://github.com/nltk/nltk) from 3.9.4 to 3.10.0.
- [Release notes](https://github.com/nltk/nltk/releases)
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](https://github.com/nltk/nltk/compare/3.9.4...v3.10.0)

---
updated-dependencies:
- dependency-name: nltk
  dependency-version: 3.10.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/qdrant-loader-mcp-server/pyproject.toml |  2 +-
 packages/qdrant-loader/pyproject.toml            |  2 +-
 uv.lock                                          | 13 +++++++------
 3 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/packages/qdrant-loader-mcp-server/pyproject.toml b/packages/qdrant-loader-mcp-server/pyproject.toml
index 602ccf0ff..c77cadf74 100644
--- a/packages/qdrant-loader-mcp-server/pyproject.toml
+++ b/packages/qdrant-loader-mcp-server/pyproject.toml
@@ -37,7 +37,7 @@ dependencies = [
     "structlog>=23.0.0",
     "PyYAML>=6.0.0",
     "rank-bm25>=0.2.2",
-    "nltk>=3.8.0",
+    "nltk>=3.10.0",
     "numpy>=1.26.0",
     "click>=8.0.0",
     "tomli>=2.0.0",
diff --git a/packages/qdrant-loader/pyproject.toml b/packages/qdrant-loader/pyproject.toml
index 250a3a802..65c6e6f00 100644
--- a/packages/qdrant-loader/pyproject.toml
+++ b/packages/qdrant-loader/pyproject.toml
@@ -55,7 +55,7 @@ dependencies = [
     "aiosqlite>=0.19.0",
     "greenlet>=3.0.0",
     "spacy>=3.7.0",
-    "nltk>=3.8.0",
+    "nltk>=3.10.0",
     "gensim>=4.3.0",
     "rank-bm25>=0.2.2",
     "faiss-cpu>=1.7.4",
diff --git a/uv.lock b/uv.lock
index d488603ca..a9bf7ae35 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2457,17 +2457,18 @@ wheels = [
 
 [[package]]
 name = "nltk"
-version = "3.9.4"
+version = "3.10.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "click", marker = "python_full_version < '3.13'" },
+    { name = "defusedxml", marker = "python_full_version < '3.13'" },
     { name = "joblib", marker = "python_full_version < '3.13'" },
     { name = "regex", marker = "python_full_version < '3.13'" },
     { name = "tqdm", marker = "python_full_version < '3.13'" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/74/a1/b3b4adf15585a5bc4c357adde150c01ebeeb642173ded4d871e89468767c/nltk-3.9.4.tar.gz", hash = "sha256:ed03bc098a40481310320808b2db712d95d13ca65b27372f8a403949c8b523d0", size = 2946864, upload-time = "2026-03-24T06:13:40.641Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/96/02/df4f105b28a7c16b0e41423bc09cf0f1b8a305df4ef0b10ca74a2e4c648c/nltk-3.10.0.tar.gz", hash = "sha256:4fbac1d98203cbcd1b5d94a2877fb822300072d80604a5e7fae49d2c5f84e8c1", size = 3089244, upload-time = "2026-07-08T02:39:13.562Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/9d/91/04e965f8e717ba0ab4bdca5c112deeab11c9e750d94c4d4602f050295d39/nltk-3.9.4-py3-none-any.whl", hash = "sha256:f2fa301c3a12718ce4a0e9305c5675299da5ad9e26068218b69d692fda84828f", size = 1552087, upload-time = "2026-03-24T06:13:38.47Z" },
+    { url = "https://files.pythonhosted.org/packages/6e/89/a0b0f35e2820d6a99d75ea1c11977ee6d5c9e6658eceb45b0c7620881faa/nltk-3.10.0-py3-none-any.whl", hash = "sha256:54ff84d4916d3ef127e8953bee0023f6a6b320b75d634a19e06ef056d3d244bf", size = 1716144, upload-time = "2026-07-08T02:39:09.753Z" },
 ]
 
 [[package]]
@@ -3766,14 +3767,14 @@ requires-dist = [
     { name = "langchain-text-splitters", specifier = ">=0.3.9" },
     { name = "markitdown", extras = ["all"], specifier = ">=0.1.3" },
     { name = "networkx", specifier = ">=3.0.0" },
-    { name = "nltk", specifier = ">=3.8.0" },
+    { name = "nltk", specifier = ">=3.10.0" },
     { name = "numpy", specifier = ">=1.26.0,<2.0.0" },
     { name = "openai", specifier = ">=1.0.0" },
     { name = "packaging", specifier = ">=21.0" },
     { name = "prometheus-client", specifier = ">=0.19.0,<1.0.0" },
     { name = "psutil", specifier = ">=5.9.0" },
     { name = "pydantic", specifier = ">=2.0.0" },
-    { name = "pydantic-settings", specifier = ">=2.14.2" },
+    { name = "pydantic-settings", specifier = ">=2.0.0" },
     { name = "pyjwt", extras = ["crypto"], marker = "extra == 'server'", specifier = ">=2.8.0" },
     { name = "python-dotenv", specifier = ">=1.0.0" },
     { name = "pyyaml", specifier = ">=6.0.0" },
@@ -3866,7 +3867,7 @@ requires-dist = [
     { name = "jsonrpcclient", specifier = ">=4.0.3" },
     { name = "jsonrpcserver", specifier = ">=5.0.7" },
     { name = "networkx", specifier = ">=3.0.0" },
-    { name = "nltk", specifier = ">=3.8.0" },
+    { name = "nltk", specifier = ">=3.10.0" },
     { name = "numpy", specifier = ">=1.26.0" },
     { name = "openai", specifier = ">=1.3.0" },
     { name = "pydantic", specifier = ">=2.4.2" },