chore(deps): bump unstructured from 0.23.1 to 0.24.0 in /samples/ai/edge-ai-demo-studio/workers/vectordb

[dependabot]

Bumps unstructured from 0.23.1 to 0.24.0.

Release notes

Sourced from unstructured's releases.

0.24.0

What's Changed

• feat: derive category_depth from heading level in the v2 (ontology) HTML parser by @​qued in Unstructured-IO/unstructured#4360
• fix(ci): stabilize partition benchmark with a rolling-median baseline by @​qued in Unstructured-IO/unstructured#4375
• refactor: centralize URL fetching with host validation and default timeouts by @​william-u10d in Unstructured-IO/unstructured#4388

New Contributors

• @​william-u10d made their first contribution in Unstructured-IO/unstructured#4388

Full Changelog: Unstructured-IO/unstructured@0.23.1...0.24.0

Changelog

Sourced from unstructured's changelog.

0.24.0

Enhancements

• Centralize outbound URL fetching: partition, partition_html, and partition_md now route url= fetches through a single shared helper (unstructured/safe_http.py) instead of ad-hoc requests.get calls. The helper applies an http/https scheme allowlist, a hostname denylist with IDNA normalization, address validation performed at connect time, manual redirect handling with per-hop re-validation (dropping credential material on cross-origin hops), refusal of proxied requests, and a default (connect, read) timeout. Behavior change: fetches that resolve to non-routable, loopback, or link-local addresses are now rejected by default. Set UNSTRUCTURED_ALLOW_PRIVATE_URL=1 (or pass allow_private=True) to opt out for controlled local usage.

0.23.3

Fixes

• Stabilize the partition-runtime benchmark CI check: the gate compared each run against a single all-time-minimum runtime, which a one-off fast runner could poison into an unbeatable floor (a frozen ~81s baseline vs a real ~130s fleet), failing every PR. It now compares against a rolling median of recent main runs with a warm-up period, so runner-speed variance can't block unrelated PRs. CI/tooling only; no library behavior changes.

0.23.2

Enhancements

• v2 (ontology) HTML parser derives category_depth from heading level: partition_html(html_parser_version="v2") now sets category_depth from a heading's HTML level (h1→0, h2→1, …) via a shared helper reused by the v1 parser, instead of DOM nesting depth. Depth no longer changes from multi-column layout alone, and parent_id chains subsections under their enclosing heading. Layout structure and text_as_html are preserved.

Fixes

• unstructured_elements_to_ontology handles empty and malformed input: returns an empty Document for empty input (instead of raising IndexError), and a layout container whose parent_id matches no open container now nests in the current container rather than popping to the document root and mis-nesting subsequent content.

Commits

• 445c957 refactor: centralize URL fetching with host validation and default timeouts (...
• f6eea75 fix(ci): stabilize partition benchmark with a rolling-median baseline (#4375)
• 37635f7 feat: derive category_depth from heading level in the v2 (ontology) HTML pars...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.