From b5369b6ebc936181c1e50f6146e2eb62ebe66129 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Jun 2026 03:53:37 +0000 Subject: [PATCH] chore(deps): bump the minor-and-patch group across 1 directory with 6 updates Bumps the minor-and-patch group with 6 updates in the /nlp-service directory: | Package | From | To | | --- | --- | --- | | [fastapi](https://github.com/fastapi/fastapi) | `0.136.1` | `0.136.3` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.47.0` | `0.48.0` | | [markitdown](https://github.com/microsoft/markitdown) | `0.1.5` | `0.1.6` | | [google-genai](https://github.com/googleapis/python-genai) | `2.4.0` | `2.7.0` | | [sentence-transformers](https://github.com/huggingface/sentence-transformers) | `5.5.0` | `5.5.1` | | [chromadb](https://github.com/chroma-core/chroma) | `0.4.24` | `0.6.3` | Updates `fastapi` from 0.136.1 to 0.136.3 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](https://github.com/fastapi/fastapi/compare/0.136.1...0.136.3) Updates `uvicorn` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/uvicorn/compare/0.47.0...0.48.0) Updates `markitdown` from 0.1.5 to 0.1.6 - [Release notes](https://github.com/microsoft/markitdown/releases) - [Commits](https://github.com/microsoft/markitdown/compare/v0.1.5...v0.1.6) Updates `google-genai` from 2.4.0 to 2.7.0 - [Release notes](https://github.com/googleapis/python-genai/releases) - [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md) - [Commits](https://github.com/googleapis/python-genai/compare/v2.4.0...v2.7.0) Updates `sentence-transformers` from 5.5.0 to 5.5.1 - [Release notes](https://github.com/huggingface/sentence-transformers/releases) - [Commits](https://github.com/huggingface/sentence-transformers/compare/v5.5.0...v5.5.1) Updates `chromadb` from 0.4.24 to 0.6.3 - [Release notes](https://github.com/chroma-core/chroma/releases) - [Changelog](https://github.com/chroma-core/chroma/blob/main/RELEASE_PROCESS.md) - [Commits](https://github.com/chroma-core/chroma/compare/0.4.24...0.6.3) --- updated-dependencies: - dependency-name: chromadb dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: fastapi dependency-version: 0.136.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: google-genai dependency-version: 2.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: markitdown dependency-version: 0.1.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: sentence-transformers dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: uvicorn dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] --- nlp-service/requirements.txt | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/nlp-service/requirements.txt b/nlp-service/requirements.txt index fcbc465..c6e49ac 100644 --- a/nlp-service/requirements.txt +++ b/nlp-service/requirements.txt @@ -1,10 +1,10 @@ # Kompl v2 nlp-service — commit 4. Pins per docs/research/2026-04-08-conversion-deps.md # and docs/research/2026-04-09-llm-compile.md. -fastapi==0.136.1 -uvicorn[standard]==0.47.0 +fastapi==0.136.3 +uvicorn[standard]==0.48.0 pydantic==2.13.4 httpx==0.28.1 -markitdown[all]==0.1.5 +markitdown[all]==0.1.6 # Promoted to a direct dep so routers/conversion.py can call # youtube-transcript-api WITHOUT going through MarkItDown for YouTube URLs. # Reason: MarkItDown's YouTubeConverter silently falls back to scraping the @@ -13,7 +13,7 @@ markitdown[all]==0.1.5 # transcript signal explicitly, which only the direct API exposes. youtube-transcript-api>=1.0.0,<2.0.0 # Commit 4: LLM compile. Use google-genai NOT google-generativeai (deprecated 2025-Q1). -google-genai==2.4.0 +google-genai==2.7.0 # Commit 4: async token-bucket rate limiter. Single uvicorn worker only — # InMemoryBucket is process-local; see research artifact section 3. pyrate-limiter==3.7.0 @@ -22,7 +22,7 @@ spacy==3.8.14 rake-nltk==1.0.6 yake==0.7.3 keybert==0.9.0 -sentence-transformers==5.5.0 +sentence-transformers==5.5.1 # pytextrank: spaCy-native TextRank component (PyPI-available, no git dep). pytextrank==3.3.0 scikit-learn==1.8.0 @@ -35,7 +35,7 @@ rapidfuzz>=3.14.5 json-repair>=0.59.10 # Commit 7: Chroma vector store (embedded, no separate server). 0.4.x API: # PersistentClient, get_or_create_collection, cosine distance. -chromadb==0.4.24 +chromadb==0.6.3 # chromadb 0.4.24 references np.float_ (chromadb/api/types.py:102), which # NumPy 2.0 removed. Pin numpy<2 until chromadb is upgraded. numpy<2