bump NLTK to version 3.9.3 ( CVE-2025-14009 )

[marctessier]

bumping to version NLTK 3.9.3 from 3.9.1
see: CVE-2025-14009
GHSA-7p94-766c-hgjp
https://github.com/EveryVoiceTTS/EveryVoice/security/dependabot/26

PR Goal?

Critical Security fix

Fixes?

CVE-2025-14009

https://nvd.nist.gov/vuln/detail/CVE-2025-14009

Feedback sought?

We should not notice any changes.

Priority?

I did a sanity test using a small sample of LJ data .. Everything worked for me.

Tests added?

How to test?

Confidence?

VERY HIGH , small minor version up. for NLTK.

Version change?

No

Related PRs?

[semanticdiff-com]

Review changes with  

[github-actions]

CLI load time: 0:00.28
Pull Request HEAD: 3a7fce7c20c6320ee2c7f65b6a4caf13e64bb9df
Imports that take more than 0.1 s:
import time: self [us] | cumulative | imported package
import time:     10012 |     160090 | everyvoice.cli

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.76%. Comparing base (4d9652d) to head (3a7fce7).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #774   +/-   ##
=======================================
  Coverage   82.76%   82.76%           
=======================================
  Files          47       47           
  Lines        4119     4119           
  Branches      607      607           
=======================================
  Hits         3409     3409           
  Misses        579      579           
  Partials      131      131           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[marctessier]

I just finished running a sanity test on Mac with success. ( CPU)