From a110016875d0bafcbc63bb4638c5c631d6266c82 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 13 Jul 2026 09:19:06 +0000
Subject: [PATCH] chore(deps): bump the minor-and-patch group across 1
 directory with 9 updates

---
updated-dependencies:
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: uvicorn
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: markitdown
  dependency-version: 0.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: google-genai
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pyrate-limiter
  dependency-version: 3.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: sentence-transformers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: scikit-learn
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: nltk
  dependency-version: 3.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 nlp-service/requirements.txt | 20 ++++++++++----------
 1 file changed, 10 insertions(+), 10 deletions(-)

diff --git a/nlp-service/requirements.txt b/nlp-service/requirements.txt
index 44d1b73..fcf249a 100644
--- a/nlp-service/requirements.txt
+++ b/nlp-service/requirements.txt
@@ -1,30 +1,30 @@
 # Kompl v2 nlp-service — commit 4. Pins per docs/research/2026-04-08-conversion-deps.md
 # and docs/research/2026-04-09-llm-compile.md.
-fastapi==0.136.1
-uvicorn[standard]==0.47.0
+fastapi==0.139.0
+uvicorn[standard]==0.51.0
 pydantic==2.13.4
 httpx==0.28.1
-markitdown[all]==0.1.5
+markitdown[all]==0.1.6
 # Promoted to a direct dep so routers/conversion.py can call
 # youtube-transcript-api WITHOUT going through MarkItDown for YouTube URLs.
 # Reason: MarkItDown's YouTubeConverter silently falls back to scraping the
 # watch-page HTML when no transcript exists (returns ~800 chars of footer
 # chrome — verified live on session 4a00f339). We need the transcript-vs-no-
 # transcript signal explicitly, which only the direct API exposes.
-# markitdown[all]==0.1.5 constrains ~=1.0.0; Dockerfile upgrades to 1.2.x
+# markitdown[all]==0.1.6 constrains ~=1.0.0; Dockerfile upgrades to 1.2.x
 # after pip install (1.0.x breaks on current YouTube timedtext responses).
 youtube-transcript-api~=1.0.0
 # Commit 4: LLM compile. Use google-genai NOT google-generativeai (deprecated 2025-Q1).
-google-genai==2.4.0
+google-genai==2.11.0
 # Commit 4: async token-bucket rate limiter. Single uvicorn worker only —
 # InMemoryBucket is process-local; see research artifact section 3.
-pyrate-limiter==3.7.0
+pyrate-limiter==3.9.0
 # Part 2a: multi-layer NLP extraction pipeline.
 spacy==3.8.14
 rake-nltk==1.0.6
 yake==0.7.3
 keybert==0.9.0
-sentence-transformers==5.5.0
+sentence-transformers==5.6.0
 # Dockerfile pins torch==2.6.0 (CPU wheel). torch 2.5.1 breaks transformers
 # 5.x imports; torch >=2.7 breaks sentence-transformers meta-device init
 # (NotImplementedError on .to(device)).
@@ -33,9 +33,9 @@ sentence-transformers==5.5.0
 transformers==5.9.0
 # pytextrank: spaCy-native TextRank component (PyPI-available, no git dep).
 pytextrank==3.3.0
-scikit-learn==1.8.0
+scikit-learn==1.9.0
 # nltk: required by rake-nltk (stopwords + punkt tokenizer data).
-nltk==3.9.4
+nltk==3.10.0
 # Part 2b: fast Levenshtein/Jaro-Winkler matching for entity resolution.
 rapidfuzz>=3.14.5
 # Recovers truncated JSON from Gemini 2.5 Flash repetition-loop bug
@@ -48,5 +48,5 @@ chromadb==0.4.24
 # NumPy 2.0 removed. Pin numpy<2 until chromadb is upgraded.
 numpy<2
 # Testing
-pytest==9.0.3
+pytest==9.1.1
 pytest-mock==3.15.1