Skip to content

Bump nltk 3.8.1 → 3.10.3 (Dependabot: 2 critical, 12 high) - #14

Open
srix wants to merge 1 commit into
masterfrom
chore/nltk-3.10.3
Open

srix wants to merge 1 commit into
masterfrom
chore/nltk-3.10.3

Conversation

@srix

@srix srix commented Sep 20, 2026

Copy link
Copy Markdown
Owner

All 20 open Dependabot alerts on the repo are for nltk==3.8.1 (unsafe pickle deserialisation, corpus-reader sandbox bypasses, ReDoS). pytamil only uses nltk for TreePrettyPrinter in the tree-drawing helpers, imported lazily from nltk.tree.

  • requirements.txt: nltk==3.10.3.
  • Verified on Python 3.10 and 3.12: 116 passed, 9 xfailed; printtree output unchanged and no deprecation warning.

Merge with a merge commit, as agreed.

🤖 Generated with Claude Code

pytamil uses nltk only for TreePrettyPrinter in the tree-drawing helpers
(மாத்திரை.printtree, வெண்பா.saveas_txttree), imported lazily from nltk.tree.
Suite verified on Python 3.10 and 3.12: 116 passed, 9 xfailed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant