Skip to content

build(deps): bump nomenklatura from 4.10.0 to 4.13.0 - #1232

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nomenklatura-4.13.0
Closed

build(deps): bump nomenklatura from 4.10.0 to 4.13.0#1232
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/nomenklatura-4.13.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps nomenklatura from 4.10.0 to 4.13.0.

Release notes

Sourced from nomenklatura's releases.

Nomenklatura 4.12.0

This release improves matcher quality and training reproducibility, while fixing several Wikidata correctness and reliability issues.

Matching

  • Retrained the packaged ERun and regression models.
  • Improved ERun's cluster-disjoint training pipeline to prevent related records leaking between training and evaluation data.
  • Improved address-number comparison and identifier fallback behavior.
  • The final ERun model improves Brier score from 0.0502 to 0.0386 and precision at the default threshold from 0.940 to 0.981.
  • Expanded and reorganized matcher test coverage.

Wikidata

  • Exclude deprecated-rank claims from Item.claims, preventing known-wrong values from entering entities or incorrectly vetoing valid records. Deprecated claims remain available through Item.deprecated.
  • Correctly interpret claim end dates, including future dates, imprecise dates, and Wikidata's "no value" marker.
  • Stop caching transient Wikidata API errors as missing entities. These errors now raise WikidataAPIError, while genuinely deleted entities remain cached as missing.
  • Skip deleted type ancestors instead of aborting traversal.
  • Respect cache_days=0 when explicitly bypassing the Wikidata item cache.
  • Preserve Wikidata QIDs as provenance when qualifying position and education statements.

Compatibility

  • The minimum rigour version is now 2.2.3.
  • Transient Wikidata API failures now propagate as WikidataAPIError; consumers that need graceful degradation should catch this exception explicitly.

Full changes: opensanctions/nomenklatura@4.11.4...4.12.0

Relevant pull requests: #326, #335, #336, #338.

Commits
  • f982bd2 Bump version: 4.12.5 → 4.13.0
  • 09c6942 Merge pull request #352 from opensanctions/blocker-match-truncation
  • 8036fde Merge pull request #350 from opensanctions/blocker-idf-ranking
  • ed8f14c Delete match_batch chunking from the blocker
  • 0423b83 Truncate match candidates inside the blocker query
  • 5365a96 Tighten blocker scoring comments
  • 7a57fd7 Harden the ranking regression test, note the alias-dampening assumption
  • e8bf0e4 Rank blocker candidates by token rarity instead of raw term frequency
  • 20e863d Bump version: 4.12.4 → 4.12.5
  • 3bba854 Merge pull request #347 from opensanctions/statement-load-executemany
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 10, 2026
@socket-security

socket-security Bot commented Aug 10, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​nomenklatura@​4.10.0 ⏵ 4.13.097 +1100100100100

View full report

Bumps [nomenklatura](https://github.com/opensanctions/nomenklatura) from 4.10.0 to 4.13.0.
- [Release notes](https://github.com/opensanctions/nomenklatura/releases)
- [Commits](opensanctions/nomenklatura@4.10.0...4.13.0)

---
updated-dependencies:
- dependency-name: nomenklatura
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/nomenklatura-4.13.0 branch from 7daebea to 490a789 Compare August 10, 2026 09:32
@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #1240.

@dependabot dependabot Bot closed this Aug 24, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/nomenklatura-4.13.0 branch August 24, 2026 06:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants