From 765d92ae19e7be076ead090ee5cafc929c06f7b7 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 21 Jul 2026 12:10:27 +0000
Subject: [PATCH] build(deps): bump nltk in the pip group across 1 directory

Bumps the pip group with 1 update in the / directory: [nltk](https://github.com/nltk/nltk).


Updates `nltk` from 3.9.4 to 3.10.0
- [Release notes](https://github.com/nltk/nltk/releases)
- [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog)
- [Commits](https://github.com/nltk/nltk/compare/3.9.4...v3.10.0)

---
updated-dependencies:
- dependency-name: nltk
  dependency-version: 3.10.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 poetry.lock    | 21 +++++++++++++++++----
 pyproject.toml |  2 +-
 2 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index 232ca4f..140120f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -716,6 +716,18 @@ files = [
     {file = "dawg2_python-0.9.0.tar.gz", hash = "sha256:adea0312acd1a958659e8448ce6899046c0858d0b6c8949a51eebdeb5a113e4a"},
 ]
 
+[[package]]
+name = "defusedxml"
+version = "0.7.1"
+description = "XML bomb protection for Python stdlib modules"
+optional = false
+python-versions = ">=2.7, !=3.0.*, !=3.1.*, !=3.2.*, !=3.3.*, !=3.4.*"
+groups = ["main"]
+files = [
+    {file = "defusedxml-0.7.1-py2.py3-none-any.whl", hash = "sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61"},
+    {file = "defusedxml-0.7.1.tar.gz", hash = "sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69"},
+]
+
 [[package]]
 name = "distlib"
 version = "0.4.1"
@@ -2089,18 +2101,19 @@ files = [
 
 [[package]]
 name = "nltk"
-version = "3.9.4"
+version = "3.10.0"
 description = "Natural Language Toolkit"
 optional = false
 python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "nltk-3.9.4-py3-none-any.whl", hash = "sha256:f2fa301c3a12718ce4a0e9305c5675299da5ad9e26068218b69d692fda84828f"},
-    {file = "nltk-3.9.4.tar.gz", hash = "sha256:ed03bc098a40481310320808b2db712d95d13ca65b27372f8a403949c8b523d0"},
+    {file = "nltk-3.10.0-py3-none-any.whl", hash = "sha256:54ff84d4916d3ef127e8953bee0023f6a6b320b75d634a19e06ef056d3d244bf"},
+    {file = "nltk-3.10.0.tar.gz", hash = "sha256:4fbac1d98203cbcd1b5d94a2877fb822300072d80604a5e7fae49d2c5f84e8c1"},
 ]
 
 [package.dependencies]
 click = "*"
+defusedxml = "*"
 joblib = "*"
 regex = ">=2021.8.3"
 tqdm = "*"
@@ -4492,4 +4505,4 @@ files = [
 [metadata]
 lock-version = "2.1"
 python-versions = "~3.13.0"
-content-hash = "5515b16cf785bf3930893248d9e51b8a188b990abb351cc379bef62c710b6f36"
+content-hash = "7ad090d138c78c19a4a3477f1324246c225d46c426401427b4ccc9af531e73be"
diff --git a/pyproject.toml b/pyproject.toml
index e84f395..172de9e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,7 +22,7 @@ alembic = ">=1.13.1"
 asyncpg = ">=0.29.0"
 pinecone = ">=3.0.0"
 sqlalchemy = {extras = ["asyncio"], version = ">=2.0.29"}
-nltk = ">=3.8.1"
+nltk = ">=3.10.0"
 pymorphy3 = ">=2.0.1"
 pymorphy3-dicts-uk = ">=2.4.1.1"
 rapidfuzz = ">=3.14.3"