updated dependancies to resolve open CVEs and cut a new version (#4108)
Summary
Version bump to 0.18.16 - Security patch release
Changes
Security Fixes: Updated multiple dependencies via pip-compile to resolve
critical CVEs:
- authlib: GHSA-pq5p-34cr-23v9
- python-3.12/python03.12-base: CVE-2025-8291, GHSA-49g5-f6qw-8mm7
- libcrypto3/libssl3: CVE-2025-9230, CVE-2025-9231, CVE-2025-9232,
GHSA-76r2-c3cg-f5r9, GHSA-9mrx-mqmg-gwj9
Enhancement: Speed up function _assign_hash_ids by 34% (codeflash)
Files Changed (13 files, +104/-92 lines)
- unstructured/__version__.py - Version bumped to 0.18.16
- CHANGELOG.md - Added release notes
- All requirement files updated with new dependency versions:
- requirements/base.txt
- requirements/dev.txt
- requirements/extra-*.txt (csv, docx, odt, paddleocr, pdf-image, pptx,
xlsx)
- requirements/huggingface.txt
- requirements/test.txt
This is a security-focused patch release that addresses multiple CVEs
while also including a performance enhancement.