chore: resolve cves

[lawrence-u10d]

Note

Security/Deps

• Broad dependency upgrades in requirements/base.txt, requirements/test.txt, and requirements/constraints.txt (e.g., fastapi, transformers, torch, unstructured[all-docs], urllib3, etc.) to remediate CVEs.

CI

• Enhances ci.yml Docker test job with aggressive disk cleanup (remove preinstalled SDKs, docker system prune -af --volumes) and prints disk usage before/after to stabilize Docker builds.

Versioning

• Bumps version to 0.0.91 in __version__.py and preprocessing-pipeline-family.yaml.
• Adds CHANGELOG.md entry for 0.0.91 noting CVE-driven upgrades.

^{Written by Cursor Bugbot for commit 5d0b9d8. This will update automatically on new commits. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	pypi/​jupyterlab@​4.4.10 ⏵ 4.5.1					+10
	pypi/​tornado@​6.5.2 ⏵ 6.5.4	+1
	pypi/​ipython@​9.7.0 ⏵ 9.8.0	+1
	pypi/​torch@​2.9.0 ⏵ 2.9.1
	pypi/​onnx@​1.19.1 ⏵ 1.20.0
	pypi/​transformers@​4.57.1 ⏵ 4.57.3
	pypi/​debugpy@​1.8.17 ⏵ 1.8.19	+1
	pypi/​matplotlib@​3.10.7 ⏵ 3.10.8	+1
	pypi/​notebook@​7.4.7 ⏵ 7.5.1
	pypi/​mypy@​1.18.2 ⏵ 1.19.1	+1				+20
	pypi/​unstructured@​0.18.18 ⏵ 0.18.24	+1
	pypi/​torchvision@​0.24.0 ⏵ 0.24.1
	pypi/​fonttools@​4.60.1 ⏵ 4.61.1	+1	+2
	pypi/​black@​25.9.0 ⏵ 25.12.0
	pypi/​pytest@​8.4.2 ⏵ 9.0.2	-3
	pypi/​execnet@​2.1.1 ⏵ 2.1.2	-9
	pypi/​nbdev@​2.4.6 ⏵ 2.4.7
	pypi/​fsspec@​2025.10.0 ⏵ 2025.12.0	+1
	pypi/​accelerate@​1.11.0 ⏵ 1.12.0	+1
	pypi/​joblib@​1.5.2 ⏵ 1.5.3	+1
	pypi/​google-auth@​2.43.0 ⏵ 2.45.0	-1
	pypi/​tzdata@​2025.2 ⏵ 2025.3
	pypi/​psutil@​7.1.3 ⏵ 7.2.1	+23
	pypi/​coverage@​7.11.1 ⏵ 7.13.1
	pypi/​fastcore@​1.8.15 ⏵ 1.10.0	+1
	pypi/​click@​8.3.0 ⏵ 8.3.1	+1
	pypi/​pikepdf@​10.0.0 ⏵ 10.1.0	+1
	pypi/​jupyter-client@​8.6.3 ⏵ 8.7.0
	pypi/​networkx@​3.5 ⏵ 3.6.1
	pypi/​anyio@​4.11.0 ⏵ 4.12.0	+1
	pypi/​urllib3@​2.5.0 ⏵ 2.6.2	+1	+22
	pypi/​annotated-doc@​0.0.3 ⏵ 0.0.4			+2
See 31 more rows in the dashboard

View full report

[luke-kucing]

lgtm