Objective: Dependabot alert #28 flags the transitive transformers dep
(pulled via docling[easyocr]) for CVE-2026-1839 — Trainer._load_rng_state()
calls torch.load() without weights_only=True, letting a malicious
checkpoint file execute arbitrary code. Patched in 5.0.0rc3.
Approach: Bump the hybrid extras' direct deps to their latest PyPI
versions so the resolver pulls transformers past the patch line, rather
than pinning transformers directly. docling 2.88.0 -> 2.91.0 already
declares a compatible transformers range that resolves to 5.6.2.
Also refreshed fastapi 0.135.3 -> 0.136.1, uvicorn 0.44.0 -> 0.46.0,
and the rag example's langchain-text-splitters 1.1.1 -> 1.1.2. Ran
`uv lock --upgrade` on both opendataloader-pdf and opendataloader-pdf-mcp
to regenerate lock files.
Evidence: Verified Dependabot alert metadata against the new lock file.
Before: transformers 4.57.6 locked, alert #28 open (range < 5.0.0rc3).
After: transformers 5.6.2 locked in python/opendataloader-pdf/uv.lock
(>= 5.0.0rc3 patch line). `uv lock --upgrade` resolved cleanly on both
Python packages with no conflicts.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Bundo Lee
2fb064e99a