Bump kreuzberg from 4.2.9 to 4.10.2

[dependabot]

Bumps kreuzberg from 4.2.9 to 4.10.2.

Release notes

Sourced from kreuzberg's releases.

v4.10.2

What's Changed

• fix(chart): harden defaults and add Artifact Hub README by @​Goldziher in kreuzberg-dev/kreuzberg-lts#1

New Contributors

• @​Goldziher made their first contribution in kreuzberg-dev/kreuzberg-lts#1

Full Changelog: kreuzberg-dev/kreuzberg-lts@v4.10.1...v4.10.2

v4.10.1

Full Changelog: kreuzberg-dev/kreuzberg-lts@v4.10.0...v4.10.1

v4.10.0

Full Changelog: https://github.com/kreuzberg-dev/kreuzberg-lts/commits/v4.10.0

Changelog

Sourced from kreuzberg's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

---

[4.10.0] - 2026-07-11

First release of the standalone Kreuzberg v4 LTS line. This is the long-term-support home for Kreuzberg v4; active development continues as Xberg (v5+). No behavioural changes to extraction — this release is a security, licensing, and packaging refresh.

Security

• Upgraded core dependencies to their latest patched releases (hf-hub, rmcp, lopdf, liter-llm, pyo3, comrak, calamine, quick-xml, text-splitter, tower-http, and others).

Changed

• License is now MIT (earlier v4 releases shipped under the Elastic License 2.0).
• Repository moved to standalone kreuzberg-dev/kreuzberg-lts. New v4 Go releases publish under github.com/kreuzberg-dev/kreuzberg-lts/v4; existing github.com/kreuzberg-dev/kreuzberg pins keep resolving via the Go module proxy cache.

Added

• LTS support policy and migration guide at docs.kreuzberg.dev/lts: v4 receives critical bug and security fixes until the end of 2026 on a best-effort basis. The R binding remains exclusive to the v4 LTS line (not part of Xberg v5).

[4.9.9] - 2026-06-05

LTS patch release with PDF/OCR robustness fixes and selected stability backports from main.

Fixed

• OCR on wide, vector-heavy single-page PDFs: uses a bounded render profile and retries at a lower cap instead of failing extraction with PdfiumLibraryInternalError(Unknown).
• Embedded PDF image OCR: unsupported image streams are re-extracted through Pdfium or skipped with a specific warning instead of repeated image dimension probe failed noise.
• RTF/MSG decompression: cap the initial allocation hint so a crafted stream cannot request a multi-gigabyte allocation from an untrusted size header.
• Table row sorting is now NaN-safe (no longer panics).
• FFI embedding preset symbols are exported even when embeddings are disabled, preventing Java/native binding startup from failing with missing symbols.
• Chunking now uses formatted content for non-plain output formats, preserves page metadata, and normalizes trailing-space page artifacts before boundary matching.
• UTF-16 email transcoding: short binary inputs are no longer misclassified as UTF-16.
• Returns a validation error when extraction_timeout_secs is set without tokio-runtime.

[4.9.8] - 2026-05-17

LTS patch release. Four targeted bug fixes plus dependency pinning so the branch builds against current crates.io releases.

Fixed

... (truncated)

Commits

• 2fe1cbf fix(deps): pin typescript to 5.x to unblock tsup dts builds
• 92370c1 chore(release): prepare v4.10.2
• f3bb223 docs(readme): rebrand all READMEs with shared Xberg assets
• 4145732 docs: migrate to Astro Starlight, drop zensical
• f18b96d chore: update ai-rulez Poly hooks to v4.9.3
• af45bb7 chore: add ai-rulez Poly hooks
• d8f9669 Merge pull request #1 from kreuzberg-dev/fix/chart-hardening
• 6ba6955 docs(chart): add Helm chart README for Artifact Hub
• 2639a91 fix(chart): single-replica default, pin image tag, writable HF_HOME
• 85c251b docs(llms): direct LLMs and agents to Xberg as the current version
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)