Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 30, 2025

Bumps unstructured from 0.18.20 to 0.18.21.

Release notes

Sourced from unstructured's releases.

0.18.21

Enhancement

  • Update save_elements unit test to check crop box padding behavior

Features

Fixes

  • Update unstructured-inference to 1.1.2 to address CVEs
Changelog

Sourced from unstructured's changelog.

0.18.21

Enhancement

  • Update save_elements unit test to check crop box padding behavior

Features

Fixes

  • Update unstructured-inference to 1.1.2 to address CVEs
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [unstructured](https://github.com/Unstructured-IO/unstructured) from 0.18.20 to 0.18.21.
- [Release notes](https://github.com/Unstructured-IO/unstructured/releases)
- [Changelog](https://github.com/Unstructured-IO/unstructured/blob/main/CHANGELOG.md)
- [Commits](Unstructured-IO/unstructured@0.18.20...0.18.21)

---
updated-dependencies:
- dependency-name: unstructured
  dependency-version: 0.18.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added backend Related to the flask backend and general Python stuff dependencies Pull requests that update a dependency file labels Nov 30, 2025
@dependabot dependabot bot requested a review from a team as a code owner November 30, 2025 19:07
@github-actions
Copy link
Contributor

The change updates the dependency version for the unstructured library within the pyproject.toml file of the backend-agent. The version is incremented from 0.18.20 to 0.18.21. This suggests an intent to incorporate bug fixes or enhancements provided in the new library version, ensuring better stability or features of the backend agent.

Walkthrough

  • Chore: Updated the dependency version for unstructured from 0.18.20 to 0.18.21, which typically includes bug fixes or performance improvements, maintaining the stability and security of the backend environment. No direct user-facing features are impacted.

Model: gpt-4o-2024-08-06 | Prompt Tokens: 306 | Completion Tokens: 138

Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Here's a collaborative code review enhanced with AI assistance. The suggestions offered are thoughtful recommendations rather than definitive solutions, so please consider what aligns with your project goals. You remain the expert decision-maker—AI simply provides additional perspective to support your development process.


Always critique what AI says. Do not let AI replace YOUR I.
Model: claude-sonnet-4-20250514 | Prompt Tokens: 853 | Completion Tokens: 310

Comment on lines 27 to 32
'PyYAML==6.0.3',
'requests==2.32.5',
'unstructured==0.18.20',
'unstructured==0.18.21',
'art==6.5',
'pandas==2.3.3',
'ollama==0.6.1',
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using version ranges instead of pinning exact versions for better dependency flexibility. The current approach pins exact versions which can lead to dependency conflicts and makes updates more difficult.

'unstructured>=0.18.21,<0.19.0',
'PyYAML>=6.0.0,<7.0.0',
'requests>=2.32.0,<3.0.0',
'pandas>=2.3.0,<3.0.0',
'ollama>=0.6.0,<0.7.0',
'art>=6.5.0,<7.0.0'

This approach allows patch and minor version updates while preventing breaking changes from major version updates. Only pin exact versions when you have specific compatibility requirements or security concerns.

@marcorosa marcorosa merged commit 0a7a0b0 into develop Dec 4, 2025
5 checks passed
@marcorosa marcorosa deleted the dependabot/uv/backend-agent/develop/unstructured-0.18.21 branch December 4, 2025 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backend Related to the flask backend and general Python stuff dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant