Skip to content

Bump nltk from 3.10.3 to 3.10.4 - #1455

Merged
NathanHB merged 2 commits into
huggingface:mainfrom
katsugtgz:depsec/nltk-3-10-4
Oct 29, 2026
Merged

NathanHB merged 2 commits into
huggingface:mainfrom
katsugtgz:depsec/nltk-3-10-4

Conversation

@katsugtgz

Copy link
Copy Markdown
Contributor

Updates nltk to address GHSA-j456-xh4h-cpf2.

Evidence:

  • pyproject.toml pinned nltk==3.10.3
  • osv-scanner reported GHSA-j456-xh4h-cpf2 (CVSS 8.6) for nltk 3.10.3 before the update
  • updated version: 3.10.4

Validation:

  • osv-scanner no longer reports GHSA-j456-xh4h-cpf2 after the update
  • pip install nltk==3.10.4 succeeds and import nltk reports 3.10.4

Scope: dependency pin update only.

@bot-ci-comment

Copy link
Copy Markdown

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

@NathanHB
NathanHB merged commit b97a653 into huggingface:main Oct 29, 2026
4 checks passed
Cai-z-us added a commit to rwkv-rs/lighteval-rwkv that referenced this pull request Nov 2, 2026
* fix: exclude compromised LiteLLM 1.107.0 (huggingface#1445)

* fix: exclude compromised LiteLLM 1.107.0

* fix: use supported Hub model search argument

* tests: make harness metric comparison work with pytest 9.2 (huggingface#1456)

pytest 9.2.0 raises TypeError when pytest.approx() is given nested data
structures. Corpus-level metric inputs (mcc, loglikelihood_f1,
multi_f1_numeric, target_perplexity, bits_per_byte) are compared as lists
of dicts containing lists, so test_unit_harness_metrics failed for them
(CI stopped on the first one, mcc, because of `pytest -x`).

Add a small recursive approx_equal helper that walks dicts/lists and only
applies pytest.approx to numeric leaves, with plain equality otherwise.

Co-authored-by: Nathan Habib <nathan.habib@hf.co>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

* Bump nltk from 3.10.3 to 3.10.4 (huggingface#1455)

Co-authored-by: katsugtgz <katsugtgz@users.noreply.github.com>
Co-authored-by: Nathan Habib <30601243+NathanHB@users.noreply.github.com>

* refactor(rwkv): isolate native evaluation policy and publication

* docs: keep custom task guide unchanged in PR

* fix(rwkv): restore file-based score loading and a single average metric

* fix(rwkv): restore direct score publication and standalone reader

* refactor(rwkv): simplify model adapter overrides

* fix(rwkv): bound retries and hand off terminal failures

---------

Co-authored-by: Guillaume Salou <17745322+jagwar@users.noreply.github.com>
Co-authored-by: Nathan Habib <30601243+NathanHB@users.noreply.github.com>
Co-authored-by: Nathan Habib <nathan.habib@hf.co>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
Co-authored-by: Muhammad Naufal Mahdi <053792227@ecampus.ut.ac.id>
Co-authored-by: katsugtgz <katsugtgz@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants