Bump chatterbot from 1.0.5 to 1.2.14

[dependabot]

Bumps chatterbot from 1.0.5 to 1.2.14.

Release notes

Sourced from chatterbot's releases.

1.2.14

• Prevent symlink injection when unzipping tar files - gunthercox/ChatterBot#2445

1.2.13

• 🐍 #2429 Add support for Python 3.14 (also drops support for Python 3.9 due to sub-dependency incompatibilities with 3.14)
• 🟥 #2434 Redis vector-store improvements
• 🧠 #2437 Improve support for LLM usage: logic adapters can now be called by an LLM as tools

1.2.12

• 📦 gunthercox/ChatterBot#2433 - Update optional python dependencies: redis, langchain-redis, langchain-huggingface, accelerate, sentence-transformers, pymongo
• 🐍 gunthercox/ChatterBot#2436 - Increase max text length from 255 to 1100

1.2.11

• gunthercox/ChatterBot#2432 - Addresses GHSA-v4w8-49pv-mf72 (CVE-2026-23842) by adding safe default database connection parameters, and ensure database connections are closed when iteration over yielded values terminate early.

1.2.10

• 💿 gunthercox/ChatterBot#2430 - Further development of experimental redis support using vectors for text similarity.

Sponsorships

🎉 A huge thanks to LambdaTest for sponsoring ChatterBot! 🎉

1.2.9

• 🐞 #2425 Fix date parsing case
• 🐜 #2426 Add check for sqlite WAL mode status and execute outside of transaction
• 🏋🏼 #2427 Improve bulk operations in training methods
• 📦 #2428 Dependency updates for redis, ollama, and pymongo

1.2.8

• 👣 #2421 Reduce running time of test suite
• 📜 #2422 Django documentation updates and swappable model improvements
• 🥡 #2423 Allow extra args to be passed to the mongodb adapter
• 🐍 #2406 Python 3.13 support!

1.2.7

• 🧪 #2407 Experimental support for large language models (https://docs.chatterbot.us/large-language-models/)
• ⬆️ gunthercox/ChatterBot@8d27a8b Pin upper bounds for the chatterbot-corpus package. Starting in chatterbot-corpus >= 1.3.0 strings longer than 255 characters will be present.

1.2.6

• gunthercox/ChatterBot@296809e Fix for postgres compatibility for the SQLStorageAdapter
• #2412 Generate response search index when in_response_to key is present in files (such as json files passed to the .train() method when using the JsonFileTrainer

1.2.5

• #2408 Django migrations (added help_text attributes to all model fields for the Django admin)
• #2408 Various Django-related bug fixes

... (truncated)

Commits

• 2d909e2 Update packge version
• 82817b5 Guard against symlinks in training data paths (#2445)
• feafc81 Update assets
• b3de59b Update version to 1.2.13
• 13fab56 Enable Python 3.14 in build matrix (#2429)
• 7acf675 Update sponsor url
• 84403d5 Improve support for LLM usage (#2437)
• f6d2510 Redis vector-store improvements (#2434)
• c5c09b3 Update sponsor logos
• ecd4550 Update version for release
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.