Update dependency nltk to v3.10.0 [SECURITY]

[mishushakov]

Fixes Dependabot alert #196 — GHSA-p4gq-832x-fm9v / CVE-2026-54293 (high, CVSS 7.5).

nltk.data.load() in nltk ≤ 3.9.4 is vulnerable to URL-encoded path traversal (decode-after-check in nltk/data.py), allowing arbitrary local file read. Bumps the template's pin from 3.9.4 to the first patched version, 3.10.0.

🤖 Generated with Claude Code

[cursor]

PR Summary

Low Risk
Dependency-only security pin with no application code changes; risk is limited to possible behavior differences in NLTK 3.10.0.

Overview
Updates template/requirements.txt from nltk==3.9.4 to nltk==3.10.0 to address CVE-2026-54293 (GHSA-p4gq-832x-fm9v), where URL-encoded path traversal in nltk.data.load() could allow reading local files. Adds a patch changeset for @e2b/code-interpreter-template.

^{Reviewed by Cursor Bugbot for commit a754958. Bugbot is set up for automated code reviews on this repo. Configure here.}

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 298d1843c4

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".