From f42efb37b07dbd26ea0436ac4cf31b4576048e47 Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Thu, 10 Sep 2026 14:40:25 +0000
Subject: [PATCH] fix(deps): bump nltk 3.10.3, tornado 6.5.8, js-yaml
 3.15.2/4.3.2 for Dependabot alerts

Co-Authored-By: mish@e2b.dev <mish@e2b.dev>
---
 pnpm-lock.yaml            | 20 ++++++++++----------
 template/requirements.txt |  4 ++--
 2 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6a2ac914..bb5a1acc 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -554,12 +554,12 @@ packages:
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
-  js-yaml@3.15.1:
-    resolution: {integrity: sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==}
+  js-yaml@3.15.2:
+    resolution: {integrity: sha512-6EuL879VkRA+1Cz578mKMiKvjPNEuk6+r1JaFzoSWejZmtf7xWbIyw1e3KkxlkzTIt9Taw6JBhEppG7utc1P+w==}
     hasBin: true
 
-  js-yaml@4.3.1:
-    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
+  js-yaml@4.3.2:
+    resolution: {integrity: sha512-SFNOvSJ+Dgf/9An904Yx+CgSlIPCkIpao4qo51lpee25TIRejdH3rhR4EZMGoNx3/TP3O+wzWuiTFl4sqbltzA==}
     hasBin: true
 
   json-buffer@3.0.1:
@@ -831,7 +831,7 @@ snapshots:
   '@changesets/parse@0.4.3':
     dependencies:
       '@changesets/types': 6.1.0
-      js-yaml: 4.3.1
+      js-yaml: 4.3.2
 
   '@changesets/read@0.6.7':
     dependencies:
@@ -862,7 +862,7 @@ snapshots:
       globals: 13.24.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.3.1
+      js-yaml: 4.3.2
       minimatch: 3.1.5
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -1181,7 +1181,7 @@ snapshots:
       imurmurhash: 0.1.4
       is-glob: 4.0.3
       is-path-inside: 3.0.3
-      js-yaml: 4.3.1
+      js-yaml: 4.3.2
       json-stable-stringify-without-jsonify: 1.0.1
       levn: 0.4.1
       lodash.merge: 4.6.2
@@ -1343,12 +1343,12 @@ snapshots:
 
   isexe@2.0.0: {}
 
-  js-yaml@3.15.1:
+  js-yaml@3.15.2:
     dependencies:
       argparse: 1.0.10
       esprima: 4.0.1
 
-  js-yaml@4.3.1:
+  js-yaml@4.3.2:
     dependencies:
       argparse: 2.0.1
 
@@ -1464,7 +1464,7 @@ snapshots:
   read-yaml-file@1.1.0:
     dependencies:
       graceful-fs: 4.2.11
-      js-yaml: 3.15.1
+      js-yaml: 3.15.2
       pify: 4.0.1
       strip-bom: 3.0.0
 
diff --git a/template/requirements.txt b/template/requirements.txt
index 572d3d73..3e453aa1 100644
--- a/template/requirements.txt
+++ b/template/requirements.txt
@@ -19,7 +19,7 @@ gensim==4.4.0
 imageio==2.37.3
 joblib==1.5.3
 librosa==0.11.0
-nltk==3.10.0
+nltk==3.10.3
 numpy==2.3.5
 numba==0.66.0
 opencv-python==4.11.0.86
@@ -37,7 +37,7 @@ seaborn==0.13.2
 soundfile==0.13.1
 spacy==3.8.14
 textblob==0.19.0
-tornado==6.5.7
+tornado==6.5.8
 urllib3==2.7.0
 xarray==2025.4.0
 xlrd==2.0.2