Skip to content

chore(deps)(deps): bump the minor-and-patch group with 2 updates - #93

Merged
overwrite00 merged 1 commit into
developfrom
dependabot/pip/develop/minor-and-patch-a8ae09d119
Jul 29, 2026
Merged

chore(deps)(deps): bump the minor-and-patch group with 2 updates#93
overwrite00 merged 1 commit into
developfrom
dependabot/pip/develop/minor-and-patch-a8ae09d119

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 2 updates: presidio-analyzer and spacy.

Updates presidio-analyzer from 2.2.363 to 2.2.364

Release notes

Sourced from presidio-analyzer's releases.

Release 2.2.364

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from presidio-analyzer's changelog.

Changelog

All notable changes to this project will be documented in this file.

[unreleased]

Analyzer

Added

  • South African ID number (ZA_ID_NUMBER) recognizer for the 13-digit national identity number, using pattern matching, context words, birth-date validation, and Luhn checksum validation. Disabled by default.
  • South African recognizers for ZA_PASSPORT, ZA_INCOME_TAX_NUMBER, ZA_DRIVER_LICENSE, ZA_VAT_NUMBER, ZA_COMPANY_REGISTRATION, ZA_TRAFFIC_REGISTER_NUMBER, ZA_LICENSE_PLATE, ZA_MOBILE_NUMBER, and ZA_TELEPHONE_NUMBER. All disabled by default.
  • Added NoOpNlpEngine for configurations that do not require NLP engine artifacts, enabling standalone recognizers such as HuggingFaceNerRecognizer to run without a spaCy or Stanza model (#2071) (Thanks @​ultramancode)
  • Added per-recognizer and per-entity score threshold configuration in the recognizer registry YAML, with the analyzer's global default_score_threshold as the fallback (#2116) (Thanks @​rodboev)
  • Added PhUmidRecognizer for Philippine Unified Multi-Purpose ID (UMID/CRN) numbers in dashed and plain 12-digit formats; disabled by default (#2045) (Thanks @​Surya-5555)

Fixed

  • PhoneRecognizer.DEFAULT_SUPPORTED_REGIONS used "UK", which is not a valid phonenumbers (libphonenumber) region code — region codes are ISO 3166-1 alpha-2, where the United Kingdom is "GB". The "UK" entry was a no-op, so UK numbers in national/local format (e.g. 020 7946 0958) were never detected by default; only international-format +44 … numbers matched, because they carry the country code and match under any region. Replaced "UK" with "GB".
  • Language model recognizers (BasicLangExtractRecognizer, AzureOpenAILangExtractRecognizer) configured in a recognizer registry YAML now honour config_path (and other recognizer-specific kwargs). Previously these entries were validated by the strict PredefinedRecognizerConfig schema, which has no config_path field and does not allow extra keys, so config_path was silently dropped and the recognizer fell back to its bundled default model configuration. Added a LangExtractRecognizerConfig model (extra="allow") and registered both recognizer class names in CONFIG_MODEL_MAP.
  • BasicLangExtractRecognizer now honours values under langextract.model.provider.language_model_params (including timeout and num_ctx). Previously these were silently dropped because langextract.extract() ignores its language_model_params argument when a pre-built ModelConfig is passed via config=, causing Ollama-backed recognizers to fall back to langextract's 120s default regardless of the configured timeout. The recognizer now merges language_model_params into ModelConfig.provider_kwargs, which is the path that reaches the provider constructor. Explicit entries under provider.kwargs: still take precedence. Also fixed a TypeError when kwargs: or language_model_params: is null in the YAML. (#1943, Thanks @​lsternlicht)
  • Fixed UsSsnRecognizer over-blocking valid SSNs in the 987654320-987654329 range due to an 8-digit instead of full 9-digit prefix in the sample-SSN denylist check (#2074) (Thanks @​AUTHENSOR)
  • Fixed FiHetuRecognizer and SgUenRecognizer dropping valid lower-case identifiers by normalizing the check character to upper case before checksum comparison (#2141) (Thanks @​uwezkhan)
  • Fixed FiHetuRecognizer incorrectly accepting 29 Feb on non-leap century years by deriving the full 4-digit year from the century-separator character before date validation (#2111) (Thanks @​jichaowang02-lang)
  • Fixed EsNieRecognizer.validate_result always passing the digit guard because isdigit was referenced instead of called, raising a TypeError for invalid inputs instead of returning False (#2146) (Thanks @​MohamedAklamaash)
  • Fixed DateRecognizer ISO 8601 pattern accepting impossible month/day values such as month 00, 13-19 or day 00, 32-39 (#2113) (Thanks @​jichaowang02-lang)
  • Fixed EsNifRecognizer and EsNieRecognizer dropping valid lowercase Spanish identifiers by upper-casing the check letter before the mod-23 checksum (#2076) (Thanks @​AUTHENSOR)
  • Fixed AuAbnRecognizer checksum incorrectly remapping a leading-zero first digit to 9 instead of subtracting 1 per the official ABR algorithm (#2109) (Thanks @​jichaowang02-lang)
  • Fixed NgNinRecognizer rejecting valid NIINs with a leading zero caused by int() conversion stripping the leading zero before Verhoeff checksum validation (#2106) (Thanks @​jichaowang02-lang)
  • Fixed Thai TNIN pattern rejecting valid province codes 22, 52, and 58 due to over-narrow character-class ranges (#2107) (Thanks @​jichaowang02-lang)
  • Fixed FiHetuRecognizer pattern accepting illegal century separators because +-A in the character class was interpreted as a range rather than three separate literals (#2108) (Thanks @​jichaowang02-lang)
  • Fixed InVehicleRegistrationRecognizer under-scoring valid registrations with zero-padded district codes by normalizing to a two-digit string before the district map lookup (#2110) (Thanks @​jichaowang02-lang)
  • Fixed UkNinoRecognizer pattern matching a numeric suffix character, producing false positives such as AB 12 34 56 1, caused by {1} quantifier placed inside the character class (#2112) (Thanks @​jichaowang02-lang)
  • Fixed DeFuehrerscheinRecognizer docstring example that contradicted the recognizer's own regex and tests (#2138) (Thanks @​jichaowang02-lang)
  • Fixed documentation incorrectly stating that IpRecognizer validates a checksum (#2133) (Thanks @​Coshea46)

Added

  • Philippine passport (PH_PASSPORT) recognizer with pattern matching and context support. Disabled by default.

Anonymizer

Security

  • Bumped cryptography lower bound to >=48.0.1 to resolve GHSA-537c-gmf6-5ccf (HIGH, vulnerable OpenSSL statically linked into wheels below 48.0.1) (#2144) (Thanks @​Copilot)

General

Added

  • Added BatchDeanonymizeEngine to complement BatchAnonymizerEngine for batch deanonymization over lists and nested dictionaries.
  • Added a --threshold flag to presidio-cli to override the analyzer confidence threshold directly from the command line (#2114) (Thanks @​rodboev)

Changed

  • Migrated CI and service-image dependency installation from Poetry to uv with committed lockfiles, fixing prolonged dependency-resolution hangs and making builds reproducible.
  • Added Python 3.14 package support for presidio-anonymizer, presidio-image-redactor, presidio-cli, presidio-structured, and presidio by allowing Python <3.15 and excluding spacy==3.8.14 on Python 3.14 where applicable (#2096) (Thanks @​Copilot)
  • Added healthcheck and restart: unless-stopped policies to all services in docker-compose.yml so containers auto-recover on crash and report readiness (#2149) (Thanks @​hiro-nikaitou)
  • Updated the LICENSE file copyright from "Microsoft Corporation" to "Presidio Contributors" (#2134) (Thanks @​cobypeled)

... (truncated)

Commits
  • 779dbd2 Bump presidio-anonymizer floor in presidio-structured (#2184)
  • 636cadd Release 2.2.364 / 0.0.60 (#2183)
  • efc7759 fix(analyzer): use valid region code "GB" instead of "UK" in PhoneRecognizer ...
  • 517d13e Stabilize CI disk usage and run Ollama E2E on arm64 (#2167)
  • 0ac87d5 docs: quote pip extras install examples (#2093)
  • 824016c feat: add no-op NLP engine (#2071)
  • 6337265 feat(analyzer): add recognizer-level threshold config (#2116)
  • 1fef62c feat: add Philippine UMID (PH_UMID) recognizer (#2045)
  • d47ef77 feat(anonymizer): add batch deanonymization support (#2115)
  • b2680be fix(analyzer): honour config_path for LangExtract recognizers in YAML registr...
  • Additional commits viewable in compare view

Updates spacy from 3.8.13 to 3.8.14

Release notes

Sourced from spacy's releases.

v3.8.14: Bug fix for model downloading in environments without pip on PATH

  • Fix spacy download failing in environments where pip is not on PATH but is available as a Python module (e.g., some virtual environments and containers)
Commits
  • 0069cf9 Set version to 3.8.14
  • 5603226 fix: check pip module availability instead of PATH binary in download (#13947)
  • d4bb796 Add least-privilege permissions to CI workflow
  • 9d29209 Pass github context via stdin instead of CLI arg
  • 4216738 Pin GitHub Actions to commit SHAs for supply chain security
  • 297938e Add smoke test and upgrade test to release build workflow
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps)(deps): bump the minor-and-patch group with 2 updates
37ed077 
Bumps the minor-and-patch group with 2 updates: [presidio-analyzer](https://github.com/data-privacy-stack/presidio) and [spacy](https://github.com/explosion/spaCy).


Updates `presidio-analyzer` from 2.2.363 to 2.2.364
- [Release notes](https://github.com/data-privacy-stack/presidio/releases)
- [Changelog](https://github.com/data-privacy-stack/presidio/blob/main/CHANGELOG.md)
- [Commits](data-privacy-stack/presidio@2.2.363...2.2.364)

Updates `spacy` from 3.8.13 to 3.8.14
- [Release notes](https://github.com/explosion/spaCy/releases)
- [Commits](explosion/spaCy@release-v3.8.13...release-v3.8.14)

---
updated-dependencies:
- dependency-name: presidio-analyzer
  dependency-version: 2.2.364
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: spacy
  dependency-version: 3.8.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file lang:python Python-related scope:core Core library/framework changes labels Jul 27, 2026
@overwrite00 overwrite00 self-assigned this Jul 27, 2026
@overwrite00
overwrite00 self-requested a review July 27, 2026 04:21
@overwrite00 overwrite00 mentioned this pull request Jul 29, 2026
Merged
@overwrite00
overwrite00 merged commit 735f7f4 into develop Jul 29, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/develop/minor-and-patch-a8ae09d119 branch July 29, 2026 11:02
overwrite00 pushed a commit that referenced this pull request Jul 29, 2026
@dependabot
chore(deps)(deps): bump cryptography from 45.0.7 to 49.0.0 (#94)
57344b2 
Verified in isolated environment combined with the presidio-analyzer/spacy bump (PR #93): cryptography 49.0.0 installs cleanly and all 27/27 tests pass, including the Fernet encrypt/decrypt round-trip used by privacy_core.py's restore-map feature. The macOS x86_64 wheel removal in 49.0.0 has no practical impact since CI already builds only on macos-latest (arm64).
overwrite00 added a commit that referenced this pull request Jul 29, 2026
@overwrite00
docs: consolidate 2.1.0-beta.2 changelog entry under Unreleased
6ccdda9 
Only stable releases should have their own CHANGELOG heading, to
keep develop and main from diverging on transient beta entries.
Also document the presidio-analyzer/spacy/cryptography bumps merged
today (#93, #94) and refresh the dependency version table in
DEVELOPMENT.md.
@overwrite00 overwrite00 mentioned this pull request Jul 29, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@overwrite00 overwrite00 Awaiting requested review from overwrite00

Assignees

@overwrite00 overwrite00

Labels

dependencies Pull requests that update a dependency file lang:python Python-related scope:core Core library/framework changes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@overwrite00