From 0f9e36f2177f7848236d89c8917fab4b0b831e69 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 09:17:43 +0000
Subject: [PATCH] chore(deps): bump the minor-and-patch group across 1
 directory with 4 updates

Bumps the minor-and-patch group with 4 updates in the /nlp-service directory: [pydantic](https://github.com/pydantic/pydantic), [google-genai](https://github.com/googleapis/python-genai), [spacy](https://github.com/explosion/spaCy) and [scikit-learn](https://github.com/scikit-learn/scikit-learn).


Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.13.4...v2.13.5)

Updates `google-genai` from 2.19.0 to 2.23.0
- [Release notes](https://github.com/googleapis/python-genai/releases)
- [Changelog](https://github.com/googleapis/python-genai/blob/main/CHANGELOG.md)
- [Commits](https://github.com/googleapis/python-genai/compare/v2.19.0...v2.23.0)

Updates `spacy` from 3.8.15 to 3.8.16
- [Release notes](https://github.com/explosion/spaCy/releases)
- [Changelog](https://github.com/explosion/spaCy/blob/master/RELEASE_NOTES.md)
- [Commits](https://github.com/explosion/spaCy/compare/release-v3.8.15...release-v3.8.16)

Updates `scikit-learn` from 1.9.0 to 1.9.1
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.9.0...1.9.1)

---
updated-dependencies:
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: google-genai
  dependency-version: 2.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: spacy
  dependency-version: 3.8.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: scikit-learn
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 nlp-service/requirements.txt | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/nlp-service/requirements.txt b/nlp-service/requirements.txt
index adc741f..aaeea0b 100644
--- a/nlp-service/requirements.txt
+++ b/nlp-service/requirements.txt
@@ -2,7 +2,7 @@
 # and docs/research/2026-04-09-llm-compile.md.
 fastapi==0.141.1
 uvicorn[standard]==0.52.4
-pydantic==2.13.4
+pydantic==2.13.5
 httpx==0.28.1
 markitdown[all]==0.1.7
 # Promoted to a direct dep so routers/conversion.py can call
@@ -15,12 +15,12 @@ markitdown[all]==0.1.7
 # after pip install (1.0.x breaks on current YouTube timedtext responses).
 youtube-transcript-api~=1.0.0
 # Commit 4: LLM compile. Use google-genai NOT google-generativeai (deprecated 2025-Q1).
-google-genai==2.19.0
+google-genai==2.23.0
 # Commit 4: async token-bucket rate limiter. Single uvicorn worker only —
 # InMemoryBucket is process-local; see research artifact section 3.
 pyrate-limiter==3.9.0
 # Part 2a: multi-layer NLP extraction pipeline.
-spacy==3.8.15
+spacy==3.8.16
 rake-nltk==1.0.6
 yake==0.7.3
 keybert==0.9.0
@@ -33,7 +33,7 @@ sentence-transformers==5.6.0
 transformers==5.9.0
 # pytextrank: spaCy-native TextRank component (PyPI-available, no git dep).
 pytextrank==3.3.0
-scikit-learn==1.9.0
+scikit-learn==1.9.1
 # nltk: required by rake-nltk (stopwords + punkt tokenizer data).
 nltk==3.10.3
 # Part 2b: fast Levenshtein/Jaro-Winkler matching for entity resolution.