Skip to content

Bump the python-dependencies group with 3 updates - #5

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-5e8ad2b3f3
Closed

Bump the python-dependencies group with 3 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-5e8ad2b3f3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 3 updates: presidio-analyzer, azure-search-documents and graspologic.

Updates presidio-analyzer from 2.2.362 to 2.2.364

Release notes

Sourced from presidio-analyzer's releases.

Release 2.2.364

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from presidio-analyzer's changelog.

Changelog

All notable changes to this project will be documented in this file.

[unreleased]

Analyzer

Added

  • Added UuidRecognizer (generic, entity type UUID) to detect UUIDs in the standard 8-4-4-4-12 hyphenated hexadecimal format, covering RFC 4122 versions 1-5 and RFC 9562 versions 6-8. Validates version and variant nibbles and filters the nil UUID to reduce false positives.
  • South African ID number (ZA_ID_NUMBER) recognizer for the 13-digit national identity number, using pattern matching, context words, birth-date validation, and Luhn checksum validation. Disabled by default.
  • South African recognizers for ZA_PASSPORT, ZA_INCOME_TAX_NUMBER, ZA_DRIVER_LICENSE, ZA_VAT_NUMBER, ZA_COMPANY_REGISTRATION, ZA_TRAFFIC_REGISTER_NUMBER, ZA_LICENSE_PLATE, ZA_MOBILE_NUMBER, and ZA_TELEPHONE_NUMBER. All disabled by default.
  • Added NoOpNlpEngine for configurations that do not require NLP engine artifacts, enabling standalone recognizers such as HuggingFaceNerRecognizer to run without a spaCy or Stanza model (#2071) (Thanks @​ultramancode)
  • Added per-recognizer and per-entity score threshold configuration in the recognizer registry YAML, with the analyzer's global default_score_threshold as the fallback (#2116) (Thanks @​rodboev)
  • Added PhUmidRecognizer for Philippine Unified Multi-Purpose ID (UMID/CRN) numbers in dashed and plain 12-digit formats; disabled by default (#2045) (Thanks @​Surya-5555)

Changed

  • The kr language code is deprecated in favor of the ISO 639-1 code ko. KrRrnRecognizer and KrPassportRecognizer still accept kr in supported_languages as a backward-compatibility alias for registries configured against their original class defaults; the alias will be removed in . KrBrnRecognizer, KrDriverLicenseRecognizer and KrFrnRecognizer have only ever defaulted to ko, so kr was removed from their default_recognizers.yaml entries in this release. (#2236)

Fixed

  • PhoneRecognizer.DEFAULT_SUPPORTED_REGIONS used "UK", which is not a valid phonenumbers (libphonenumber) region code — region codes are ISO 3166-1 alpha-2, where the United Kingdom is "GB". The "UK" entry was a no-op, so UK numbers in national/local format (e.g. 020 7946 0958) were never detected by default; only international-format +44 … numbers matched, because they carry the country code and match under any region. Replaced "UK" with "GB".
  • Language model recognizers (BasicLangExtractRecognizer, AzureOpenAILangExtractRecognizer) configured in a recognizer registry YAML now honour config_path (and other recognizer-specific kwargs). Previously these entries were validated by the strict PredefinedRecognizerConfig schema, which has no config_path field and does not allow extra keys, so config_path was silently dropped and the recognizer fell back to its bundled default model configuration. Added a LangExtractRecognizerConfig model (extra="allow") and registered both recognizer class names in CONFIG_MODEL_MAP.
  • BasicLangExtractRecognizer now honours values under langextract.model.provider.language_model_params (including timeout and num_ctx). Previously these were silently dropped because langextract.extract() ignores its language_model_params argument when a pre-built ModelConfig is passed via config=, causing Ollama-backed recognizers to fall back to langextract's 120s default regardless of the configured timeout. The recognizer now merges language_model_params into ModelConfig.provider_kwargs, which is the path that reaches the provider constructor. Explicit entries under provider.kwargs: still take precedence. Also fixed a TypeError when kwargs: or language_model_params: is null in the YAML. (#1943, Thanks @​lsternlicht)
  • Fixed UsSsnRecognizer over-blocking valid SSNs in the 987654320-987654329 range due to an 8-digit instead of full 9-digit prefix in the sample-SSN denylist check (#2074) (Thanks @​AUTHENSOR)
  • Fixed FiHetuRecognizer and SgUenRecognizer dropping valid lower-case identifiers by normalizing the check character to upper case before checksum comparison (#2141) (Thanks @​uwezkhan)
  • Fixed FiHetuRecognizer incorrectly accepting 29 Feb on non-leap century years by deriving the full 4-digit year from the century-separator character before date validation (#2111) (Thanks @​jichaowang02-lang)
  • Fixed EsNieRecognizer.validate_result always passing the digit guard because isdigit was referenced instead of called, raising a TypeError for invalid inputs instead of returning False (#2146) (Thanks @​MohamedAklamaash)
  • Fixed DateRecognizer ISO 8601 pattern accepting impossible month/day values such as month 00, 13-19 or day 00, 32-39 (#2113) (Thanks @​jichaowang02-lang)
  • Fixed EsNifRecognizer and EsNieRecognizer dropping valid lowercase Spanish identifiers by upper-casing the check letter before the mod-23 checksum (#2076) (Thanks @​AUTHENSOR)
  • Fixed AuAbnRecognizer checksum incorrectly remapping a leading-zero first digit to 9 instead of subtracting 1 per the official ABR algorithm (#2109) (Thanks @​jichaowang02-lang)
  • Fixed NgNinRecognizer rejecting valid NIINs with a leading zero caused by int() conversion stripping the leading zero before Verhoeff checksum validation (#2106) (Thanks @​jichaowang02-lang)
  • Fixed Thai TNIN pattern rejecting valid province codes 22, 52, and 58 due to over-narrow character-class ranges (#2107) (Thanks @​jichaowang02-lang)
  • Fixed FiHetuRecognizer pattern accepting illegal century separators because +-A in the character class was interpreted as a range rather than three separate literals (#2108) (Thanks @​jichaowang02-lang)
  • Fixed InVehicleRegistrationRecognizer under-scoring valid registrations with zero-padded district codes by normalizing to a two-digit string before the district map lookup (#2110) (Thanks @​jichaowang02-lang)
  • Fixed UkNinoRecognizer pattern matching a numeric suffix character, producing false positives such as AB 12 34 56 1, caused by {1} quantifier placed inside the character class (#2112) (Thanks @​jichaowang02-lang)
  • Fixed DeFuehrerscheinRecognizer docstring example that contradicted the recognizer's own regex and tests (#2138) (Thanks @​jichaowang02-lang)
  • Fixed documentation incorrectly stating that IpRecognizer validates a checksum (#2133) (Thanks @​Coshea46)

Added

  • Philippine passport (PH_PASSPORT) recognizer with pattern matching and context support. Disabled by default.

Anonymizer

Security

  • Bumped cryptography lower bound to >=48.0.1 to resolve GHSA-537c-gmf6-5ccf (HIGH, vulnerable OpenSSL statically linked into wheels below 48.0.1) (#2144) (Thanks @​Copilot)

General

Added

  • Added BatchDeanonymizeEngine to complement BatchAnonymizerEngine for batch deanonymization over lists and nested dictionaries.
  • Added a --threshold flag to presidio-cli to override the analyzer confidence threshold directly from the command line (#2114) (Thanks @​rodboev)

Changed

... (truncated)

Commits
  • 779dbd2 Bump presidio-anonymizer floor in presidio-structured (#2184)
  • 636cadd Release 2.2.364 / 0.0.60 (#2183)
  • efc7759 fix(analyzer): use valid region code "GB" instead of "UK" in PhoneRecognizer ...
  • 517d13e Stabilize CI disk usage and run Ollama E2E on arm64 (#2167)
  • 0ac87d5 docs: quote pip extras install examples (#2093)
  • 824016c feat: add no-op NLP engine (#2071)
  • 6337265 feat(analyzer): add recognizer-level threshold config (#2116)
  • 1fef62c feat: add Philippine UMID (PH_UMID) recognizer (#2045)
  • d47ef77 feat(anonymizer): add batch deanonymization support (#2115)
  • b2680be fix(analyzer): honour config_path for LangExtract recognizers in YAML registr...
  • Additional commits viewable in compare view

Updates azure-search-documents from 12.0.0 to 12.1.0b2

Commits
  • 71ebbb4 [Search] Include Issue Cleanup starting 2026-08-01-preview release (#48767)
  • fc72d1a [Storage Blob] Migrating to TypeSpec (#45133)
  • 11200c9 Scope durable task IDs by hosted session GUID (#48776)
  • aeeef3d Prepare azure-postgresql-auth 1.1.0 for release (#48762)
  • ce9b039 Populate measurements on telemetry from the microsoft.custom_measurements a...
  • eacd370 Increment package version after release of azure-ai-agentserver-responses (#4...
  • fa961e4 [azure-ai-evaluation] Release 1.18.4 (#48782)
  • 2aa7d57 [AI Projects] Add synthetic multi-turn evaluation sample (#48786)
  • 2653fc4 Fix Conda update script for missed packages from previous release (#48768)
  • 62b7843 [AutoPR azure-mgmt-enclave]-generated-from-SDK Generation - Python-6751861 (#...
  • Additional commits viewable in compare view

Updates graspologic from 3.3.0 to 3.4.4

Release notes

Sourced from graspologic's releases.

v3.4.4

Bump version manually before release

Full Changelog: graspologic-org/graspologic@v3.4.3...v3.4.4

v3.4.3

(Hopefully) Fix issue with Github Actions and release process

Full Changelog: graspologic-org/graspologic@v3.4.2...v3.4.3

v3.4.2

Updates dependencies

What's Changed

New Contributors

Full Changelog: graspologic-org/graspologic@v3.4.1...v3.4.2

v3.4.1

Update dependency versions

  • beartype: ^0.10.4 -> ^0.18.5
  • hyppo: ^0.3.2 -> ^0.4.0
  • networkx: ^2.8.8 -> ^3
  • POT: ^0.7.0 -> ^0.9.0

v3.4.0

  • Python 3.12 Support
  • Using new Poetry-based build system
  • Replace references of microsoft/graspologic with graspologic-org/graspologic
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-dependencies group with 3 updates
9d16af7 
Bumps the python-dependencies group with 3 updates: [presidio-analyzer](https://github.com/data-privacy-stack/presidio), [azure-search-documents](https://github.com/Azure/azure-sdk-for-python) and [graspologic](https://github.com/graspologic-org/graspologic).


Updates `presidio-analyzer` from 2.2.362 to 2.2.364
- [Release notes](https://github.com/data-privacy-stack/presidio/releases)
- [Changelog](https://github.com/data-privacy-stack/presidio/blob/main/CHANGELOG.md)
- [Commits](data-privacy-stack/presidio@2.2.362...2.2.364)

Updates `azure-search-documents` from 12.0.0 to 12.1.0b2
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-search-documents_12.0.0...azure-search-documents_12.1.0b2)

Updates `graspologic` from 3.3.0 to 3.4.4
- [Release notes](https://github.com/graspologic-org/graspologic/releases)
- [Commits](graspologic-org/graspologic@v3.3.0...v3.4.4)

---
updated-dependencies:
- dependency-name: presidio-analyzer
  dependency-version: 2.2.364
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: azure-search-documents
  dependency-version: 12.1.0b2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: graspologic
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 7, 2026
@MRafiqAsim

MRafiqAsim commented Oct 8, 2026

Copy link
Copy Markdown
Owner

Closing: this moves azure-search-documents to a 12.x beta, but the Azure AI Search backend targets the 11.x API (pinned to <12). The other updates will come with the next grouped update.

@MRafiqAsim MRafiqAsim closed this Oct 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@MRafiqAsim
MRafiqAsim deleted the dependabot/uv/python-dependencies-5e8ad2b3f3 branch October 8, 2026 07:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@MRafiqAsim