Sourced from nltk's changelog.

Version 3.5 2020-04-13

• add support for Python 3.8
• drop support for Python 2
• create NLTK's own Tokenizer class distinct from the Treebank reference tokeniser
• update Vader sentiment analyser
• fix JSON serialization of some PoS taggers
• minor improvements in grammar.CFG, Vader, pl196x corpus reader, StringTokenizer
• change implementation <= and >= for FreqDist so they are partial orders
• make FreqDist iterable
• correctly handle Penn Treebank trees with a unlabeled branching top node.

Thanks to the following contributors to 3.5: Nicolas Darr, Gerhard Kremer, Liling Tan, Christopher Hench, Alexandre Dias, Hervé Nicol, Pierpaolo Pantone, Bonifacio de Oliveira, Maciej Gawinecki, BLKSerene, hoefling, alvations, pyfisch, srhrshr

Version 3.4.5 2019-08-20

• Fixed security bug in downloader: Zip slip vulnerability - for the unlikely situation where a user configures their downloader to use a compromised server https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14751)

Thanks to the following contributors to 3.4.5: Mike Salvatore

Version 3.4.4 2019-07-04

• fix bug in plot function (probability.py)
• add improved PanLex Swadesh corpus reader

Thanks to the following contributors to 3.4.4: Devashish Lal, Liling Tan

Version 3.4.3 2019-06-07

• add Text.generate()
• add QuadgramAssocMeasures
• add SSP to tokenizers
• return confidence of best tag from AveragedPerceptron
• make plot methods return Axes objects
• don't require list arguments to PositiveNaiveBayesClassifier.train
• fix Tree classes to work with native Python copy library
• fix inconsistency for NomBank
• fix random seeding in LanguageModel.generate
• fix ConditionalFreqDist mutation on tabulate/plot call
• fix broken links in documentation
• fix misc Wordnet issues
• update installation instructions

Thanks to the following contributors to 3.4.3: alvations, Bharat123rox, cifkao, drewmiller, free-variation, henchc irisxzhou, nick-ulle, ppartarr, simonepri, yigitsever, zhaoyanpeng

... (truncated)

• 6b0312a Merge pull request #2446 from sildar/3.4.5
• 3d5e597 Fix devnull error on python2.7
• acca8d5 updates for 3.4.5
• 083bbf0 updates for 3.4.5
• f59d7ed CVE-2019-14751:
• 2554ff4 updates for 3.4.4
• fbda919 drop comment about implementation which is no longer accurate, and which did ...
• 8bcc98a Merge pull request #2319 from BLaZeKiLL/BLaZeKiLL-polt-bug-fix
• f6a4f38 Merge pull request #2291 from alvations/better-panlex
• 8c75c56 Merge pull request #2324 from minho42/Fix-typo
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.