ci(dependabot): bump cdp-backend from 3.2.8 to 4.0.7 in /infra

[dependabot]

Bumps cdp-backend from 3.2.8 to 4.0.7.

Release notes

Sourced from cdp-backend's releases.

Google Speech-to-Text Out, Whisper In

CouncilDataProject cdp-backend v4.0.0

⚠️ ⚠️ This is a major breaking release. Instance maintainers should update the instance with just update-from-cookiecutter. ⚠️ ⚠️

You should re-read through the SETUP/README.md document as there is some new minor configuration required. Specifically the new PERSONAL_ACCESS_TOKEN and Quote Increase request should be the only things that need to be updated for existing instances.

You should also lower how often your CRON event gather runs prior to running just update-from-cookiecutter. All of the instances maintained by the CDP Core Team will be lowered to running only once per day.

---

Council Data Project is a backend, frontend, and cookiecutter deployment for creating a whole database, storage system, and website, for archiving, exploring, and tracking municipal council action.

This library, cdp-backend maintains the pipelines, database models, infrastructure configuration, etc.

v4.0.0

There are two main changes for this release.

1. We are swapping out Google Speech-to-Text for OpenAIs Whisper.

Specifically, we are using a forked version called faster-whisper. This new speech-to-text model performs much better (ranging from ~3.6% word-error-rate to ~9% word-error-rate on long audio files).

To use this new model efficiently, we need access to a GPU. Since GitHub Actions do not have GPUs available, we are using a system which spins up a Google Cloud Compute Engine instance, connects to it, runs our job, and then tears it down all in the course of a single GitHub Action workflow. From multiple tests, this should be a reduction in cost and processing time however with this release we will do more testing to get a better estimate.

2. We have switched from MIT to MPLv2 License.

Unless you are trying to fork our code and take it private, this won't affect you.

Bugfix for Trimmed Videos During Parallel Processing

In v3.2.10, we introduced video trimming during processing in cases where users may just want to process part of a larger video. That functionality broke when trying to parallel process events because all trimmed sections were stored under the same file name. This release fixes that behavior by making the temporary file name used for the clipped portion random / a uuid.

What's Changed

• bugfix/unique-temp-filenames by @​chrisjkhan in CouncilDataProject/cdp-backend#225

Full Changelog: CouncilDataProject/cdp-backend@v3.2.10...v3.2.11

Trimming Video Prior to Processing

What's Changed

• Add transcription range fields to database and ingestion models, add … by @​chrisjkhan in CouncilDataProject/cdp-backend#221

New Contributors

• @​chrisjkhan made their first contribution in CouncilDataProject/cdp-backend#221

Additionally I would like to thank: @​dphoria and @​smai-f

Full Changelog: CouncilDataProject/cdp-backend@v3.2.8...v3.2.9

Commits

• d1fb41e Do not allow breaking fireo change
• 8e54f4a Move backoff dep to primary deps
• e63c25d Also catch comma doc sentences
• 7727bcc Whisper: fix mult spaces & period, no double clean
• 3566dea Add backoff to db validators
• 576fda4 Add time delay between each youtube test
• d811ae1 Use normal python function and backoff lib instead of prefect task for get_ev...
• 96c955e Lint and format
• 6341a00 Reorder the whisper segment text processing
• a2ee756 Remove special characters found in transcripts
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)