Skip to content

chore(deps): bump presidio-analyzer from 2.2.363 to 2.2.364 in /project/services/redaction#195

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/project/services/redaction/presidio-analyzer-2.2.364
Open

chore(deps): bump presidio-analyzer from 2.2.363 to 2.2.364 in /project/services/redaction#195
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/project/services/redaction/presidio-analyzer-2.2.364

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps presidio-analyzer from 2.2.363 to 2.2.364.

Release notes

Sourced from presidio-analyzer's releases.

Release 2.2.364

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from presidio-analyzer's changelog.

Changelog

All notable changes to this project will be documented in this file.

[unreleased]

Analyzer

Added

  • Added NoOpNlpEngine for configurations that do not require NLP engine artifacts, enabling standalone recognizers such as HuggingFaceNerRecognizer to run without a spaCy or Stanza model (#2071) (Thanks @​ultramancode)
  • Added per-recognizer and per-entity score threshold configuration in the recognizer registry YAML, with the analyzer's global default_score_threshold as the fallback (#2116) (Thanks @​rodboev)
  • Added PhUmidRecognizer for Philippine Unified Multi-Purpose ID (UMID/CRN) numbers in dashed and plain 12-digit formats; disabled by default (#2045) (Thanks @​Surya-5555)

Fixed

  • PhoneRecognizer.DEFAULT_SUPPORTED_REGIONS used "UK", which is not a valid phonenumbers (libphonenumber) region code — region codes are ISO 3166-1 alpha-2, where the United Kingdom is "GB". The "UK" entry was a no-op, so UK numbers in national/local format (e.g. 020 7946 0958) were never detected by default; only international-format +44 … numbers matched, because they carry the country code and match under any region. Replaced "UK" with "GB".
  • Language model recognizers (BasicLangExtractRecognizer, AzureOpenAILangExtractRecognizer) configured in a recognizer registry YAML now honour config_path (and other recognizer-specific kwargs). Previously these entries were validated by the strict PredefinedRecognizerConfig schema, which has no config_path field and does not allow extra keys, so config_path was silently dropped and the recognizer fell back to its bundled default model configuration. Added a LangExtractRecognizerConfig model (extra="allow") and registered both recognizer class names in CONFIG_MODEL_MAP.
  • BasicLangExtractRecognizer now honours values under langextract.model.provider.language_model_params (including timeout and num_ctx). Previously these were silently dropped because langextract.extract() ignores its language_model_params argument when a pre-built ModelConfig is passed via config=, causing Ollama-backed recognizers to fall back to langextract's 120s default regardless of the configured timeout. The recognizer now merges language_model_params into ModelConfig.provider_kwargs, which is the path that reaches the provider constructor. Explicit entries under provider.kwargs: still take precedence. Also fixed a TypeError when kwargs: or language_model_params: is null in the YAML. (#1943, Thanks @​lsternlicht)
  • Fixed UsSsnRecognizer over-blocking valid SSNs in the 987654320-987654329 range due to an 8-digit instead of full 9-digit prefix in the sample-SSN denylist check (#2074) (Thanks @​AUTHENSOR)
  • Fixed FiHetuRecognizer and SgUenRecognizer dropping valid lower-case identifiers by normalizing the check character to upper case before checksum comparison (#2141) (Thanks @​uwezkhan)
  • Fixed FiHetuRecognizer incorrectly accepting 29 Feb on non-leap century years by deriving the full 4-digit year from the century-separator character before date validation (#2111) (Thanks @​jichaowang02-lang)
  • Fixed EsNieRecognizer.validate_result always passing the digit guard because isdigit was referenced instead of called, raising a TypeError for invalid inputs instead of returning False (#2146) (Thanks @​MohamedAklamaash)
  • Fixed DateRecognizer ISO 8601 pattern accepting impossible month/day values such as month 00, 13-19 or day 00, 32-39 (#2113) (Thanks @​jichaowang02-lang)
  • Fixed EsNifRecognizer and EsNieRecognizer dropping valid lowercase Spanish identifiers by upper-casing the check letter before the mod-23 checksum (#2076) (Thanks @​AUTHENSOR)
  • Fixed AuAbnRecognizer checksum incorrectly remapping a leading-zero first digit to 9 instead of subtracting 1 per the official ABR algorithm (#2109) (Thanks @​jichaowang02-lang)
  • Fixed NgNinRecognizer rejecting valid NIINs with a leading zero caused by int() conversion stripping the leading zero before Verhoeff checksum validation (#2106) (Thanks @​jichaowang02-lang)
  • Fixed Thai TNIN pattern rejecting valid province codes 22, 52, and 58 due to over-narrow character-class ranges (#2107) (Thanks @​jichaowang02-lang)
  • Fixed FiHetuRecognizer pattern accepting illegal century separators because +-A in the character class was interpreted as a range rather than three separate literals (#2108) (Thanks @​jichaowang02-lang)
  • Fixed InVehicleRegistrationRecognizer under-scoring valid registrations with zero-padded district codes by normalizing to a two-digit string before the district map lookup (#2110) (Thanks @​jichaowang02-lang)
  • Fixed UkNinoRecognizer pattern matching a numeric suffix character, producing false positives such as AB 12 34 56 1, caused by {1} quantifier placed inside the character class (#2112) (Thanks @​jichaowang02-lang)
  • Fixed DeFuehrerscheinRecognizer docstring example that contradicted the recognizer's own regex and tests (#2138) (Thanks @​jichaowang02-lang)
  • Fixed documentation incorrectly stating that IpRecognizer validates a checksum (#2133) (Thanks @​Coshea46)

Anonymizer

Security

  • Bumped cryptography lower bound to >=48.0.1 to resolve GHSA-537c-gmf6-5ccf (HIGH, vulnerable OpenSSL statically linked into wheels below 48.0.1) (#2144) (Thanks @​Copilot)

General

Added

  • Added BatchDeanonymizeEngine to complement BatchAnonymizerEngine for batch deanonymization over lists and nested dictionaries.
  • Added a --threshold flag to presidio-cli to override the analyzer confidence threshold directly from the command line (#2114) (Thanks @​rodboev)

Changed

  • Migrated CI and service-image dependency installation from Poetry to uv with committed lockfiles, fixing prolonged dependency-resolution hangs and making builds reproducible.
  • Added Python 3.14 package support for presidio-anonymizer, presidio-image-redactor, presidio-cli, presidio-structured, and presidio by allowing Python <3.15 and excluding spacy==3.8.14 on Python 3.14 where applicable (#2096) (Thanks @​Copilot)
  • Added healthcheck and restart: unless-stopped policies to all services in docker-compose.yml so containers auto-recover on crash and report readiness (#2149) (Thanks @​hiro-nikaitou)
  • Updated the LICENSE file copyright from "Microsoft Corporation" to "Presidio Contributors" (#2134) (Thanks @​cobypeled)
  • Replaced presidio@microsoft.com author email with presidio@dataprivacystack.org in all package pyproject.toml files (#2128) (Thanks @​Copilot)
  • Improved CI stability by optimizing disk usage, pinning the Ollama Docker image to a specific version, and running Ollama end-to-end tests on arm64 runners (#2167) (Thanks @​SharonHart)
  • Updated mobile homepage layout with a compact mascot for smaller screens (#2130) (Thanks @​SharonHart)

Fixed

... (truncated)

Commits
  • 779dbd2 Bump presidio-anonymizer floor in presidio-structured (#2184)
  • 636cadd Release 2.2.364 / 0.0.60 (#2183)
  • efc7759 fix(analyzer): use valid region code "GB" instead of "UK" in PhoneRecognizer ...
  • 517d13e Stabilize CI disk usage and run Ollama E2E on arm64 (#2167)
  • 0ac87d5 docs: quote pip extras install examples (#2093)
  • 824016c feat: add no-op NLP engine (#2071)
  • 6337265 feat(analyzer): add recognizer-level threshold config (#2116)
  • 1fef62c feat: add Philippine UMID (PH_UMID) recognizer (#2045)
  • d47ef77 feat(anonymizer): add batch deanonymization support (#2115)
  • b2680be fix(analyzer): honour config_path for LangExtract recognizers in YAML registr...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump presidio-analyzer in /project/services/redaction
fe29261 
Bumps [presidio-analyzer](https://github.com/data-privacy-stack/presidio) from 2.2.363 to 2.2.364.
- [Release notes](https://github.com/data-privacy-stack/presidio/releases)
- [Changelog](https://github.com/data-privacy-stack/presidio/blob/main/CHANGELOG.md)
- [Commits](data-privacy-stack/presidio@2.2.363...2.2.364)

---
updated-dependencies:
- dependency-name: presidio-analyzer
  dependency-version: 2.2.364
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added chore Conventional Commit: chore/ci/refactor/test dependencies Dependency updates labels Jul 23, 2026
@dependabot
dependabot Bot requested a review from igolubic as a code owner July 23, 2026 06:44
@dependabot dependabot Bot added chore Conventional Commit: chore/ci/refactor/test dependencies Dependency updates labels Jul 23, 2026
@igolubic igolubic moved this to In Progress in Cogeto Jul 23, 2026
@igolubic igolubic added this to Cogeto Jul 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@igolubic igolubic Awaiting requested review from igolubic igolubic is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

chore Conventional Commit: chore/ci/refactor/test dependencies Dependency updates

Projects

Cogeto
Status: In Progress

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@igolubic