[mc-nv]

What does the PR do?

• Bump click 8.1.7 -> 8.5.0 and transformers 5.12.1 -> 5.20.2 in the kafka-io example
• Address security scan findings for the 26.10 release

Checklist

• PR title reflects the change and is of format <commit_type>: <Title>
• Changes are described in the pull request.
• Related issues are referenced.
• Populated github labels field
• Added test plan and verified test passes.
• Verified that the PR passes existing CI.
• Verified copyright is correct on all changed files.
• Added succinct git squash message before merging ref.
• All template sections are filled out.
• Optional: Additional screenshots for behavior/output changes with before/after.

Related PRs:

• chore: Bump jackson-databind to 2.22.4 client#938

Where should the reviewer start?

• Triton_Inference_Server_Python_API/examples/kafka-io/requirements.txt

Test plan:

• CI Pipeline ID:

Caveats:

Background

Related Issues: (use one of the action keywords Closes / Fixes / Resolves / Relates to)

• Resolves: TRI-1979

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge; no actionable regression was found.

Summary

Updates two dependencies in the Kafka tutorial:

• The Kafka I/O example installs newer pinned versions of click and transformers.

No actionable issues were established. Installation and runtime tests were not run.

_{Reviews (1) · Last reviewed commit: "chore: Bumping default versions" · Reviewed by Greptile}