From 61d624281f2f7249987a58dbc632c1b73c4937f9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 20:03:01 +0000 Subject: [PATCH 1/2] chore(deps): bump nltk in /template in the pip group across 1 directory Bumps the pip group with 1 update in the /template directory: [nltk](https://github.com/nltk/nltk). Updates `nltk` from 3.10.3 to 3.10.4 - [Release notes](https://github.com/nltk/nltk/releases) - [Changelog](https://github.com/nltk/nltk/blob/develop/ChangeLog) - [Commits](https://github.com/nltk/nltk/compare/v3.10.3...v3.10.4) --- updated-dependencies: - dependency-name: nltk dependency-version: 3.10.4 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] --- template/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/template/requirements.txt b/template/requirements.txt index be756af2..c2e18c48 100644 --- a/template/requirements.txt +++ b/template/requirements.txt @@ -19,7 +19,7 @@ gensim==4.4.0 imageio==2.37.3 joblib==1.5.3 librosa==0.11.0 -nltk==3.10.3 +nltk==3.10.4 numpy==2.3.5 numba==0.66.0 opencv-python==4.11.0.86 From 904978dbc74bb80127c47b6eafd87df28cf006d0 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 20:27:55 +0000 Subject: [PATCH 2/2] chore: add changeset for nltk 3.10.4 Co-Authored-By: mish@e2b.dev --- .changeset/bump-nltk-3-10-4.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/bump-nltk-3-10-4.md diff --git a/.changeset/bump-nltk-3-10-4.md b/.changeset/bump-nltk-3-10-4.md new file mode 100644 index 00000000..c5c94ce5 --- /dev/null +++ b/.changeset/bump-nltk-3-10-4.md @@ -0,0 +1,5 @@ +--- +'@e2b/code-interpreter-template': patch +--- + +Bump `nltk` to 3.10.4 (GHSA-8mgp-746c-j5xp). NLTK now confines resource reads/writes to `nltk.data.path`, loads pickled models through a restricted unpickler and skips world-writable data directories (e.g. under `/tmp`); the default `~/nltk_data` is unaffected.