Chore(deps): bump magika from 0.5.1 to 1.0.2 in /solution/text-extractor

[dependabot]

Bumps magika from 0.5.1 to 1.0.2.

Release notes

Sourced from magika's releases.

python-v1.0.2

Changelog:

• Mark python 3.14 as supported.
• Remove direct dependency on numpy.
• Remove dependency on python-dotenv (note: .env files are no longer loaded automatically).
• Remove onnxruntime<=1.20.1 Windows pin.

See all CHANGELOGs here: https://github.com/google/magika/blob/python-v1.0.2/python/CHANGELOG.md#102---2026-02-25

cli/v1.0.2

Install magika 1.0.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/google/magika/releases/download/cli/v1.0.2/magika-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/google/magika/releases/download/cli/v1.0.2/magika-installer.ps1 | iex"

Download magika 1.0.2

File	Platform	Checksum
magika-aarch64-apple-darwin.tar.xz	Apple Silicon macOS	checksum
magika-x86_64-pc-windows-msvc.zip	x64 Windows	checksum
magika-aarch64-unknown-linux-gnu.tar.xz	ARM64 Linux	checksum
magika-x86_64-unknown-linux-gnu.tar.xz	x64 Linux	checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo google/magika

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

python-v1.0.1

This release marks the first stable release, and the end of the experimental phase.

Updated documentation is at the new website: https://securityresearch.google/magika/

... (truncated)

Changelog

Sourced from magika's changelog.

[1.0.2] - 2026-02-25

• Mark python 3.14 as supported.
• Remove direct dependency on numpy.
• Remove dependency on python-dotenv (note: .env files are no longer loaded automatically).
• Remove onnxruntime<=1.20.1 Windows pin.

[1.0.1] - 2025-10-31

• Mark end of experimental phase. No changes from last version.

[0.6.3] - 2025-10-30

• Pin onnxruntime on Windows (#1099).
• Add docstrings for all relevant modules, classes, and methods.
• Improved READMEs and overall documentation.

[0.6.2] - 2025-05-02

• Mark python 3.13 as supported.
• New model standard_v3_3 model, with better support for TypeScript and non-ascii characters in textual files. See models' CHANGELOG for more information.
• identify_stream() now restores the stream's original position after reading from it, preventing side effects on subsequent stream operations. (#1020)
• Add asdict() utility method to MagikaResult.
• Set prediction.overwrite_reason to Overwrite.NONE if output.label is the same as dl.label. (#1023)
• Bugfix: limit the number of bytes we read in case of an input with just many whitespaces. (#1015)
• Bugfix: do not alter warnings' simplefilter as this has visible side effects for other modules. (#1017)
• Bugfix: magika's python client now properly warns for low-confidence predictions.
• Bugfix: update Magika's StrEnum string representation to be compatible with standard library.

[0.6.1] - 2025-03-19

Overview

Magika v0.6.1 is a significant update featuring a new model with 2x supported content types, a new command line client in Rust, performance improvements, API enhancements, and a few breaking changes. This changelog entry rolls up all changes from v0.5.1, the last stable release.

[!IMPORTANT] There are a few breaking changes! After reading about the new key features and improvements, we suggest to consult the migration guide below and the updated documentation.

Key Features and Improvements

• New deep learning model: We introduce a new model, standard_v3_2, which supports 2x content types (200+ in total, see full list here), has a similar ~99% average accuracy, and is ~20% faster, with an inference speed of about ~2ms on CPUs (YMMV depending on your testing setup). See models' CHANGELOG for more information.
• New command line client, written in Rust: We developed a new command line client, written in Rust, which is not affected by the one-time bootstrap overhead caused by the python's interpreter itself. This new client is packaged, pre-compiled, into the magika python package. This new client replaces the old client written in Python (but the old Python one is still available as a fallback for those platforms for which we don't have precompiled rust binaries).
• New stream-based identification: Added identify_stream(stream: typing.BinaryIO) API to infer content types from open binary streams. (#970)
• Improved path handling: identify_path and identify_paths now accept Union[str, os.PathLike] objects. You no longer need to explicitly use pathlib.Path. (#935)
• Improved python API: The new Python APIs offer a number of improvements, including: the inference APIs now return a MagikaResult, which is a absl::StatusOr-like object that wraps MagikaPrediction, with a clear separation between valid predictions and error situations; the output content types (label) are not just str anymore, but of type ContentTypeLabel, making integrations more robust (ContentTypeLabel extends StrEnum: thus, they are not just str, but you can treat them as such). The MagikaPrediction object now has additional is_text and extensions fields (in addition to the existing label, mime_type, group, and description).
• New debugging APIs: Added new APIs to ease debugging and introspection, such as get_output_content_types(), get_model_content_types(), get_module_version(), and get_model_name().

Breaking Changes and Migration Guide

This release introduces several breaking changes. Please review this guide carefully to update your code:

1. New identify_* API output format: The inference Python APIs now return a MagikaResult object, which is similar to absl::StatusOr; This provides a cleaner way to handle errors. dl.ct_label and output.ct_label are renamed to dl.label and output.label. labels are now of type ContentTypeLabel, which extends StrEnum (thus, they are not just str, but you can treat them as such). The score field is now at the top level, alongside dl and output. The magic field has been removed as it was often either incorrect or redundant; use description instead.

... (truncated)

Commits

• 0d49da7 python: prepare for release of 1.0.2
• 05701c3 python: add back requests as dev dependency
• 68d3721 python: update uv.lock
• 7d86e72 python: update dependencies
• 279b02f python: remove dependency to python-dotenv
• 6c85155 python: remove direct dependency on numpy
• 8184f58 Update python/scripts/run_quick_test_magika_module.py
• bb42b3e python: update uv.lock
• 6481ce0 python: fix deprecation warning for pyproject.toml
• b7546cb python: show "total" when measuring perf
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✨ See the Django Site deployed at: https://oqsidpasg4.execute-api.us-east-1.amazonaws.com/eph-2127 ✨