chore(deps): bump presidio-analyzer from 2.2.355 to 2.2.363 in /project/services/redaction

[dependabot]

Bumps presidio-analyzer from 2.2.355 to 2.2.363.

Release notes

Sourced from presidio-analyzer's releases.

Release 2.2.363

What's Changed

• feat(analyzer): add German PII recognizers (DE_*) by @​MvdB in data-privacy-stack/presidio#1909
• build(deps): bump azure/login from 2.3.0 to 3.0.0 by @​dependabot[bot] in data-privacy-stack/presidio#1915
• build(deps): bump github/codeql-action from 4.32.6 to 4.34.1 by @​dependabot[bot] in data-privacy-stack/presidio#1914
• build(deps): bump actions/cache from 5.0.3 to 5.0.4 by @​dependabot[bot] in data-privacy-stack/presidio#1913
• Fix: config path resolution for PyPI installs (langextract recognizer) by @​RonShakutai in data-privacy-stack/presidio#1917
• build(deps): bump github/codeql-action from 4.34.1 to 4.35.1 by @​dependabot[bot] in data-privacy-stack/presidio#1920
• fix(ci): skip coverage PR comment step when not in a PR context by @​SharonHart with @​Copilot in data-privacy-stack/presidio#1921
• Swedish personal ID code pattern recognizer by @​goveebee in data-privacy-stack/presidio#1912
• Publish sdist alongside wheels to PyPI by @​SharonHart with @​Copilot in data-privacy-stack/presidio#1924
• build(deps): bump python from 3.13-windowsservercore to 3.15.0a7-windowsservercore in /presidio-anonymizer by @​dependabot[bot] in data-privacy-stack/presidio#1927
• Swedish Recognizer for Organisationsnummer by @​goveebee in data-privacy-stack/presidio#1918
• Fix conf files handling in Docker + Stanza model accessibility issues by @​TheSabari07 in data-privacy-stack/presidio#1930
• fix: revert presidio-analyzer Dockerfiles to Python 3.12 and configure dependabot to allow only patch and digest updates by @​dependabot[bot] in data-privacy-stack/presidio#1928
• build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 by @​dependabot[bot] in data-privacy-stack/presidio#1935
• build(deps): bump python from f50f56f to f1927c7 in /presidio-image-redactor by @​dependabot[bot] in data-privacy-stack/presidio#1936
• Add Canadian SIN recognizer by @​kennionblack in data-privacy-stack/presidio#1934
• build(deps): bump python from fb83750 to 5e59aae in /presidio-anonymizer by @​dependabot[bot] in data-privacy-stack/presidio#1937
• build(deps): bump python from f3fa41d to 5072b08 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1938
• Update IP recognizer regexes by @​kennionblack in data-privacy-stack/presidio#1941
• Slim NLP Engine by @​SharonHart in data-privacy-stack/presidio#1916
• chore: harden supply-chain security — dependabot.yml controls and pyproject.toml defensive version ranges by @​SharonHart with @​Copilot in data-privacy-stack/presidio#1965
• build(deps): bump python from 5072b08 to 804ddf3 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1968
• build(deps): bump python from 3.13-slim to 3.13.13-slim in /presidio-image-redactor by @​dependabot[bot] in data-privacy-stack/presidio#1967
• build(deps): bump python from 5e59aae to bc389f7 in /presidio-anonymizer by @​dependabot[bot] in data-privacy-stack/presidio#1966
• Updated copilot instructions by @​omri374 in data-privacy-stack/presidio#1866
• feat: Add UK driving licence number recognizer by @​tee-jagz in data-privacy-stack/presidio#1857
• feat: add merge_entities_with_whitespace param to anonymize() by @​harishkernel in data-privacy-stack/presidio#1932
• build(deps-dev): update azure-identity requirement from <2.0.0,>=1.23.0 to >=1.25.3,<2.0.0 in /presidio-anonymizer by @​dependabot[bot] in data-privacy-stack/presidio#1983
• build(deps-dev): update stanza requirement from <2.0.0,>=1.10.1 to >=1.11.1,<2.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1982
• build(deps-dev): update gliner requirement from <1.0.0,>=0.2.13 to >=0.2.26,<1.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1981
• build(deps): update opencv-python requirement from <5.0.0,>=4.0.0 to >=4.13.0.92,<5.0.0 in /presidio-image-redactor by @​dependabot[bot] in data-privacy-stack/presidio#1980
• build(deps-dev): update spacy-huggingface-pipelines requirement from <1.0.0,>=0.0.1 to >=0.0.4,<1.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1979
• build(deps-dev): update gunicorn requirement from <26.0.0,>=20.0.0 to >=25.3.0,<26.0.0 in /presidio-image-redactor by @​dependabot[bot] in data-privacy-stack/presidio#1978
• build(deps): update pytesseract requirement from <0.4,>=0.3.7 to >=0.3.13,<0.4 in /presidio-image-redactor by @​dependabot[bot] in data-privacy-stack/presidio#1977
• build(deps): bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in data-privacy-stack/presidio#1976
• build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in data-privacy-stack/presidio#1975
• Add dependency groups for Docker and actions by @​SharonHart in data-privacy-stack/presidio#1984
• build(deps): update pydantic requirement from <3.0.0,>=2.0.0 to >=2.12.5,<3.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1989
• build(deps): update pyyaml requirement from <7.0.0,>=6.0.0 to >=6.0.3,<7.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1988
• build(deps-dev): update azure-ai-textanalytics requirement from <6.0.0,>=5.3.0 to >=5.4.0,<6.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1987
• build(deps): update azure-ai-formrecognizer requirement from <4.0.0,>=3.3.0 to >=3.3.3,<4.0.0 in /presidio-image-redactor by @​dependabot[bot] in data-privacy-stack/presidio#1986
• build(deps): bump actions/github-script from 8.0.0 to 9.0.0 in the actions-deps group by @​dependabot[bot] in data-privacy-stack/presidio#1985
• test(ip-recognizer): add ::1 loopback and mixed :: / ::1 test cases by @​extrasmall0 in data-privacy-stack/presidio#1940
• Fix dependabot coverage for all pyproject.toml package manifests by @​SharonHart with @​Copilot in data-privacy-stack/presidio#1929
• build(deps): bump py-cov-action/python-coverage-comment-action from 3.40 to 3.41 in the actions-deps group by @​dependabot[bot] in data-privacy-stack/presidio#1991
• build(deps): update phonenumbers requirement from <10.0.0,>=8.12 to >=9.0.28,<10.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1994
• build(deps): update tldextract requirement from <6.0.0,>=3.0.0 to >=5.3.1,<6.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1992
• build(deps-dev): update azure-core requirement from <2.0.0,>=1.20.0 to >=1.39.0,<2.0.0 in /presidio-analyzer by @​dependabot[bot] in data-privacy-stack/presidio#1993

... (truncated)

Changelog

Sourced from presidio-analyzer's changelog.

[2.2.363] - 2026-06-28

General

Added

• Published source distributions alongside wheels in the PyPI release pipeline (#1924) (Thanks @​Copilot)

Changed

• Rebranded repository documentation and links for Data Privacy Stack, added project transition notices about Presidio's move to its new home at https://presidio.dataprivacystack.org/project_transition/, migrated the docs site to Material for MkDocs/Zensical, and updated docs publishing and search verification workflows (#2097, #2098, #2100, #2102, #2104, #2117, #2118, #2119, #2120, #2121, #2122) (Thanks @​omri374, @​SharonHart)
• Moved container image publishing from Microsoft Container Registry to GitHub Container Registry under ghcr.io/data-privacy-stack, updated Docker usage documentation, and fixed GHCR authentication and provenance publishing in CI (#2103, #2123, #2124) (Thanks @​SharonHart, @​Copilot)
• Updated Dependabot coverage and grouping for package, Docker, Docker Compose, and GitHub Actions dependencies, with defensive dependency range controls (#1928, #1929, #1965, #1984, #2005) (Thanks @​dependabot, @​Copilot, @​SharonHart)
• Updated GitHub Actions dependencies, Docker base images, and sample dependency pins across CI/release workflows (#1913, #1914, #1915, #1920, #1927, #1935, #1936, #1937, #1938, #1966, #1967, #1968, #1975, #1976, #1985, #1991, #1996) (Thanks @​dependabot)
• Updated Copilot development instructions for the repository (#1866) (Thanks @​omri374)

Fixed

• Skipped the coverage PR-comment step outside pull request runs to prevent CI failures on push and workflow-dispatch runs (#1921) (Thanks @​Copilot)
• Cleaned stale Poetry virtual environments during CI reruns to avoid mixed NumPy installs and IndentationError failures (#2091) (Thanks @​Copilot)
• Fixed OpenAI anonymization sample typos, Fabric sample dependency guidance, and duplicate ZIP-code example documentation (#2017, #2027, #2034) (Thanks @​ynachiket, @​BelizSertcan)

Analyzer

Added

• Recognizer registry YAML entries now accept score_thresholds for recognizer-wide and entity-specific score cutoffs, with the analyzer's default_score_threshold as the fallback.
• UK Driving Licence Number (UK_DRIVING_LICENCE) recognizer with pattern matching and context support (#1857) (Thanks @​tee-jagz)
• German PII recognizers for DE_TAX_ID, DE_TAX_NUMBER, DE_PASSPORT, DE_ID_CARD, DE_SOCIAL_SECURITY, DE_HEALTH_INSURANCE, DE_KFZ, DE_HANDELSREGISTER, and DE_PLZ; all are disabled by default (#1909) (Thanks @​MvdB)
• SE_PERSONNUMMER recognizer for Swedish personal identity and coordination numbers, plus Swedish Organisationsnummer recognition; both are disabled by default (#1912, #1918) (Thanks @​goveebee)
• SlimSpacyNlpEngine and slim analyzer configs, enabling lightweight tokenization/lemmatization while delegating NER to recognizers such as GLiNER (#1916) (Thanks @​SharonHart)
• Canadian SIN (CA_SIN) recognizer with English/French context and Luhn checksum validation (#1934) (Thanks @​kennionblack)
• Turkish recognizers for TR_NATIONAL_ID, TR_LICENSE_PLATE, and TR_PHONE_NUMBER; all are disabled by default (#1995, #1999, #2006) (Thanks @​mrcuren)
• Spanish Passport (ES_PASSPORT) recognizer (#2011) (Thanks @​asensionacher)
• Optional countries filter for RecognizerRegistry.load_predefined_recognizers(), country metadata on predefined/custom recognizers, country-code introspection, and YAML supported_countries support (#2000) (Thanks @​ynachiket)
• Configurable supported_entity support in PhoneRecognizer, including correct propagation to recognizer results (#2014) (Thanks @​max-tarlov-infinitusai)
• Philippines TIN (PH_TIN) and Philippine mobile number (PH_MOBILE_NUMBER) recognizers; both are disabled by default (#2016, #2038) (Thanks @​aaronaco, @​Surya-5555)
• South African ID number (ZA_ID_NUMBER) recognizer with birth-date and Luhn validation; disabled by default (#2064) (Thanks @​thatomokoena)

Changed

• Consolidated analyzer configuration into a single analyzer.yaml flow while preserving the older config files with deprecation banners (#1970) (Thanks @​SharonHart)
• Added Python 3.14 package support for presidio-analyzer by allowing Python <3.15 and avoiding spacy==3.8.14, which does not provide compatible Python 3.14 wheels (#2105) (Thanks @​michaelgiraldo)
• Updated analyzer dependencies and metadata for stanza, gliner, spacy-huggingface-pipelines, pydantic, pyyaml, azure-ai-textanalytics, azure-core, phonenumbers, tldextract, azure-identity, numpy, and explicit click support (#1979, #1981, #1982, #1987, #1988, #1989, #1992, #1993, #1994, #2001, #2058, #2090, #2092) (Thanks @​dependabot, @​Copilot, @​SharonHart)

Fixed

• Resolved LangExtract configuration path loading for installed PyPI packages (#1917) (Thanks @​RonShakutai)
• Fixed analyzer Docker configuration handling and Stanza model accessibility (#1930) (Thanks @​TheSabari07)
• Improved IP recognizer regexes and regression coverage for IPv4-mapped/embedded and compressed IPv6 edge cases (#1941, #1940, #2062) (Thanks @​kennionblack, @​extrasmall0, @​AlexanderSanin)
• Corrected German recognizer checksum and structural validation for KVNR, RVNR, LANR, VAT ID, passport/ID MRZ checksums, BSNR, tax IDs, and default registry coverage (#1990) (Thanks @​MvdB)
• Fixed Polish PESEL checksum validation (#1998) (Thanks @​sienioApius)
• Fixed PhoneRecognizer default region typo from FE to FR (#2009) (Thanks @​Copilot)
• Preserved GLiNER and recognizer-specific configuration fields through Pydantic validation and config serialization (#2007, #2081) (Thanks @​yuriihavrylko, @​ultramancode)
• Ignored empty allow-list terms in regex matching (#2061) (Thanks @​uwezkhan)
• Capped URL recognizer host matching to avoid quadratic backtracking (#2063) (Thanks @​uwezkhan)
• Fixed Singapore UEN detection for Format C identifiers with the R prefix (#2088) (Thanks @​jichaowang02-lang)
• Fixed Australian ACN checksum validation for valid ACNs whose check digit is 0 (#2087) (Thanks @​jichaowang02-lang)
• Added missing IBAN registry formats for EG, IQ, LY, LC, SC, and UA (#2078) (Thanks @​AUTHENSOR)

... (truncated)

Commits

• 5c0ac33 Release 2.2.363 / 0.0.59 (#2126)
• 5e717f4 Fix URL test bounds for DPS domain (#2125)
• 0d6299b Apply remaining changes (#2124)
• 13ed56b fix(ci): restore id-token:write permission for provenance attestations in bui...
• 4b35522 Revert to Microsoft as copyright owner (#2122)
• e9fd384 Final removal of Microsoft reference (#2121)
• d1a1af6 docs: publish docs with git CLI (#2120)
• bfeec6c docs: add Google Search Console site-verification meta tag (#2119)
• 9914a81 revert: undo accidental direct-to-main docs pushes (#2118)
• 4de6656 Migrate to ghcr packages (#2103)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)