copilot-swe-agent[bot] 075829c5fb fix: upgrade nltk to 3.10.0 to resolve path traversal vulnerabilities ...

Upgrades nltk from 3.9.4 to 3.10.0 which fixes three path traversal
vulnerabilities (GHSA-qvv7-cg9c-w4x3, GHSA-fg7f-2386-8897,
GHSA-xh95-f55m-82fw) that were causing the pip-audit CI job to fail.

Also removes the now-obsolete PYSEC-2026-597 ignore entry from the
vulnerability-scan workflow since the vulnerability is fixed in 3.10.0.

2026-08-03 11:31:36 +00:00

..

build-uv-cache.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

codeql.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

docs-broken-links.yml

ci: check doc links only on edge and latest versions (#6633)

2026-07-27 08:22:01 -04:00

generate-tool-specs.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

linter.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

nightly.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

pr-size.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

pr-title.yml

ci: pin third-party actions to commit SHAs

2026-05-20 19:01:53 +08:00

publish.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

stale.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

tests.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

type-checker.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

update-test-durations.yml

ci: pin third-party actions to commit SHAs (#5869)

2026-05-21 18:08:34 -05:00

vulnerability-scan.yml

fix: upgrade nltk to 3.10.0 to resolve path traversal vulnerabilities

2026-08-03 11:31:36 +00:00