Bump nltk from 3.10.0 to 3.10.3 in /src/backend

[dependabot]

Bumps nltk from 3.10.0 to 3.10.3.

Release notes

Sourced from nltk's releases.

v3.10.3

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

• Sandbox Stanford JAR execution to nltk_data directories by @​ekaf in nltk/nltk#3743
• docs: wrap Chat-80 HOWTO output by @​medisean in nltk/nltk#3741
• ci: sandboxed-open guard + stabilize security tests across platforms/pythons (#3740) by @​alvations in nltk/nltk#3744
• Prepare release 3.10.3 by @​ekaf in nltk/nltk#3745

New Contributors

• @​medisean made their first contribution in nltk/nltk#3741

Full Changelog: nltk/nltk@v3.10.2...v3.10.3

v3.10.3-rc1

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

What's Changed

• Sandbox Stanford JAR execution to nltk_data directories by @​ekaf in nltk/nltk#3743
• docs: wrap Chat-80 HOWTO output by @​medisean in nltk/nltk#3741

... (truncated)

Changelog

Sourced from nltk's changelog.

Version 3.10.3 2026-08-12

• docs: wrap Chat-80 HOWTO output
• Sandbox Stanford JAR execution to nltk_data directories
• Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
• Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string distances (CWE-407/CWE-400)
• Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
• fix(security): sandbox MaltParser's Java execution (CVE-2026-12252, CVE-2026-12841)
• fix(security): trust the system temp dir only when it is private (CWE-377/CWE-378)
• fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
• fix(security): validate per-call java() options and replace the -XX:/-D allowlist with a minimal one (CWE-88)
• Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59, CWE-776, CWE-918)

Thanks to the following contributors to 3.10.3: Mohammad Favas S, leduckhuong, Ziyu Lin, dougtrainer28-cmyk, Chaitanya Kadian, 0xRenSec, Arpit Jain, Jace, nguyencanhthuong, Liling Tan, medimedi, Eric Kafe.

Version 3.10.2 2026-08-05

• Remove inisec.py and document PYTHONSAFEPATH instead
• Skip draft step in release workflow
• Fix symlink escape in FramenetCorpusReader (CWE-59)
• Guard tempfile.gettempdir() when building pathsec allowed roots
• add tests for transitive_closure

Thanks to the following contributors to 3.10.2: Litesh Ghute, Eric Kafe, Evan Kiefer, tarann26 and Rav Singh Chandan

Version 3.10.1 2026-07-29

• Expand ~ in env-var paths
• Validate types after WordNet app pickle deserialization
• Fix uncontrolled search path in HunposTagger
• Use exact thirds in masi_distance
• Avoid retaining bllip import exceptions
• Fix word_tokenize: pad opening single quote before multi-letter words.
• Implement Tree.pformat_latex_forest.
• Prevent module hijacking in inline imports.
• Fix ReDoS in TweetTokenizer URL and email regexes.

Thanks to the following contributors to 3.10.1: Abhinav, Litesh Ghute, Eric Kafe, Eryk Kaźmierczak, Selim C., Muhtasim Munif Fahim, Triniti K., and Tom Y. Mitich.

Version 3.10.0 2026-06-11

• Enforce the stricter nltk.pathsec security policy by default
• Document the new security model and migration guidance
• Harden resource loading against path traversal and SSRF/DNS-rebinding
• Harden downloader path handling and block XML entity expansion
• Close remaining corpus-reader security edge cases
• Replace unsafe exec() usage in the utility CLI

... (truncated)

Commits

• 303f6e2 Prepare release 3.10.3 (#3745)
• cf2aaac Merge pull request #3744 from alvations/ci-guard-open
• 6cd8320 test: robustness on Python 3.14 / 3.14t CI (UnicodeDecodeError + timing flake)
• e965330 fix: perceptron save_to_json breaks on Windows (os.open can't fd-open a direc...
• df1bb4c test: make pathsec security tests platform-independent (fix Linux/Windows CI)
• 0e5c7be ci: guard against un-sandboxed open() in sandbox-sensitive modules (#3740)
• 5017826 Merge commit from fork
• 40d0f06 Triple-check hardening: perceptron TOCTOU squat, pathsec fd-leak, bcp47 entit...
• 483c5fe Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU + s...
• 722778f Merge commit from fork
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

Coverage Report •

File	Stmts	Miss	Cover	Missing
TOTAL	3835	552	85%

report-only-changed-files is enabled. No files were changed during this commit :)

Tests	Skipped	Failures	Errors	Time
837	0 💤	0 ❌	0 🔥	9.487s ⏱️

[Copilot]

🟢 Approval recommended

The change is a straightforward patch-level dependency bump with no other code modifications required for consistency in the current repo state.

Pull request overview

This PR updates the backend’s Python dependency pin for nltk, aligning the backend environment with NLTK v3.10.3 (a patch release with multiple security hardening fixes upstream).

Changes:

• Bump nltk from 3.10.0 to 3.10.3 in src/backend/pyproject.toml.

File summaries

File	Description
src/backend/pyproject.toml	Updates the backend dependency pin for nltk to v3.10.3.

Review details

• Files reviewed: 1/2 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.