bump nltk to resolve [CVE-2025-14009](GHSA-7p94-766c-hgjp) (#2298)

dworthen · web-flow · commit df2a8b32e07b · 2026-03-27T08:52:22.000-07:00
diff --git a/.semversioner/next-release/patch-20260327143615384539.json b/.semversioner/next-release/patch-20260327143615384539.json
@@ -0,0 +1,4 @@
+{
+  "type": "patch",
+  "description": "bump nltk to resolve [CVE-2025-14009](https://github.com/advisories/GHSA-7p94-766c-hgjp)"
+}
diff --git a/packages/graphrag/pyproject.toml b/packages/graphrag/pyproject.toml
@@ -46,7 +46,7 @@ dependencies = [
     "graspologic-native~=1.2",
     "json-repair~=0.30",
     "networkx~=3.4",
-    "nltk==3.9.1",
+    "nltk~=3.9",
     "numpy~=2.1",
     "pandas~=2.3",
     "pyarrow~=22.0",
diff --git a/uv.lock b/uv.lock

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +{
 +  "type": "patch",
 +  "description": "bump nltk to resolve [CVE-2025-14009](https://github.com/advisories/GHSA-7p94-766c-hgjp)"
 +}