Objective: 10 open Dependabot alerts (3 high, 4 medium, 2 low) and 1 open
code scanning alert (information exposure through exception) accumulate
security risk and block compliance checks.
Approach: Update all packages across Node, Python, and Java to their
latest stable versions. Fix the code scanning alert by replacing raw
exception messages with a generic error string in the HTTP response —
stack traces are still logged server-side for debugging.
Evidence: Full build and test suites pass across all three ecosystems.
Node: pnpm build + vitest — 18/18 tests pass with TypeScript 6.0.2.
tsconfig.json updated with "types": ["node"] and
"ignoreDeprecations": "6.0" for TS6 compatibility.
Python: pytest — 40/40 tests pass. uv.lock updated for both packages.
hybrid tests skip as expected (optional deps not installed locally).
Java: mvn clean verify — 502/502 tests pass (448 core + 54 cli).
maven-compiler-plugin 3.14.1→3.15.0, spotbugs 4.9.8.2→4.9.8.3.
Security alerts addressed:
- Code scanning #30: hybrid_server.py no longer leaks str(e) to client
- Dependabot #25-27 (vite): updated to ^8.0.8
- Dependabot #30 (pillow), #31 (pytest), #29 (cryptography),
#28 (transformers), #24/#23 (Pygments): lock files pull patched versions
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Add README.md to batch example directory for consistency with rag/
- Note that directory input may find more PDFs than top-level glob
- Clarify shutdown() is per-application-exit, not per-batch
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- Java shutdown() comment: clarify it releases thread pools, call once
- batch_processing.py: rename "Elements" to "Top-level" for accuracy
- requirements.txt: add Python version comment
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- README: top example uses list input, link to Batch Processing section, new section with CLI/Python/Node.js examples
- quick-start-java.mdx: loop + shutdown pattern, CLI multi-file
- cli-options-reference.mdx: multi-file and mixed input examples
- faq.mdx: expanded "multiple PDFs" answer with list, directory, CLI, performance tip
- rag-integration.mdx: expanded batch section with list input and CLI equivalent
- examples/python/batch/: runnable batch processing example + requirements.txt
Fixes#269
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Bundo Lee