From 3f14818a03f427cfa35525b5866c3d843da276eb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 15:35:42 +0000 Subject: [PATCH] Bump the python-runtime group in /backend_api_python with 12 updates Updates the requirements on [ruff](https://github.com/astral-sh/ruff), [yfinance](https://github.com/ranaroussi/yfinance), [ccxt](https://github.com/ccxt/ccxt), [litellm](https://github.com/BerriAI/litellm), [certifi](https://github.com/certifi/python-certifi), [akshare](https://github.com/akfamily/akshare), [python-dotenv](https://github.com/theskumar/python-dotenv), [redis](https://github.com/redis/redis-py), [gunicorn](https://github.com/benoitc/gunicorn), [marshmallow](https://github.com/marshmallow-code/marshmallow), [pypdf](https://github.com/py-pdf/pypdf) and [alpaca-py](https://github.com/alpacahq/alpaca-py) to permit the latest version. Updates `ruff` to 0.16.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.0...0.16.3) Updates `yfinance` to 1.6.0 - [Release notes](https://github.com/ranaroussi/yfinance/releases) - [Changelog](https://github.com/ranaroussi/yfinance/blob/main/CHANGELOG.rst) - [Commits](https://github.com/ranaroussi/yfinance/compare/1.5.2...1.6.0) Updates `ccxt` to 4.5.74 - [Release notes](https://github.com/ccxt/ccxt/releases) - [Commits](https://github.com/ccxt/ccxt/compare/v4.5.73...v4.5.74) Updates `litellm` to 1.97.0 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](https://github.com/BerriAI/litellm/compare/v1.93.0...v1.97.0) Updates `certifi` to 2026.7.22 - [Commits](https://github.com/certifi/python-certifi/compare/2026.06.17...2026.07.22) Updates `akshare` to 1.18.92 - [Release notes](https://github.com/akfamily/akshare/releases) - [Changelog](https://github.com/akfamily/akshare/blob/main/docs/changelog.md) - [Commits](https://github.com/akfamily/akshare/compare/release-v1.18.80...release-v1.18.92) Updates `python-dotenv` to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.3) Updates `redis` to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](https://github.com/redis/redis-py/compare/v6.4.0...v8.1.0) Updates `gunicorn` to 26.1.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](https://github.com/benoitc/gunicorn/compare/26.0.0...26.1.0) Updates `marshmallow` to 4.3.1 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](https://github.com/marshmallow-code/marshmallow/compare/4.3.0...4.3.1) Updates `pypdf` to 6.16.1 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](https://github.com/py-pdf/pypdf/compare/6.15.0...6.16.1) Updates `alpaca-py` to 0.44.0 - [Release notes](https://github.com/alpacahq/alpaca-py/releases) - [Commits](https://github.com/alpacahq/alpaca-py/compare/v0.43.5...v0.44.0) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.3 dependency-type: direct:development dependency-group: python-runtime - dependency-name: yfinance dependency-version: 1.6.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: ccxt dependency-version: 4.5.74 dependency-type: direct:production dependency-group: python-runtime - dependency-name: litellm dependency-version: 1.97.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: certifi dependency-version: 2026.7.22 dependency-type: direct:production dependency-group: python-runtime - dependency-name: akshare dependency-version: 1.18.92 dependency-type: direct:production dependency-group: python-runtime - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production dependency-group: python-runtime - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: gunicorn dependency-version: 26.1.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: marshmallow dependency-version: 4.3.1 dependency-type: direct:production dependency-group: python-runtime - dependency-name: pypdf dependency-version: 6.16.1 dependency-type: direct:production dependency-group: python-runtime - dependency-name: alpaca-py dependency-version: 0.44.0 dependency-type: direct:production dependency-group: python-runtime ... Signed-off-by: dependabot[bot] --- backend_api_python/requirements-dev.txt | 2 +- backend_api_python/requirements.txt | 22 +++++++++++----------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/backend_api_python/requirements-dev.txt b/backend_api_python/requirements-dev.txt index a322b7323..274595ed9 100644 --- a/backend_api_python/requirements-dev.txt +++ b/backend_api_python/requirements-dev.txt @@ -3,4 +3,4 @@ pip-audit>=2.10.1,<3 pytest>=9.1.1,<10 pytest-cov>=7.1.0,<8 pytest-timeout>=2.4.0,<3 -ruff>=0.16.0,<0.17 +ruff>=0.16.3,<0.17 diff --git a/backend_api_python/requirements.txt b/backend_api_python/requirements.txt index 10a28cf4e..1785e4158 100644 --- a/backend_api_python/requirements.txt +++ b/backend_api_python/requirements.txt @@ -3,8 +3,8 @@ Flask==3.1.3 Werkzeug>=3.1.8 flask-cors==6.0.5 finnhub-python>=2.4.29 -yfinance>=1.5.2 -ccxt>=4.5.73 +yfinance>=1.6.0 +ccxt>=4.5.74 # GHSA-cq5v-8q36-5273 (C parser OOB read), GHSA-mfx4-hv73-q22v and # GHSA-mq44-7p77-q5h7 (WebSocket parsing); 3.14.3+ aiohttp>=3.14.3,<3.15 @@ -14,15 +14,15 @@ TA-Lib==0.7.1 exchange-calendars>=4.13.2,<5 requests>=2.34.2 websocket-client>=1.9.0,<2 -litellm>=1.93.0,<1.94 +litellm>=1.97.0,<1.98 # ccxt 4.5.73 pins certifi==2026.6.17. Keep the direct floor # aligned with the exchange client until ccxt relaxes its constraint. -certifi>=2026.6.17 +certifi>=2026.7.22 PySocks>=1.7.1 -akshare>=1.18.80 +akshare>=1.18.92 # GHSA-752w-5fwx-jx9f (crit header); 2.12.0+ PyJWT>=2.13.0,<3 -python-dotenv>=1.2.2 +python-dotenv>=1.2.3 # GHSA-g6cj-pr64-35w5 (PKCS#7 Bleichenbacher oracle); 50.0.0+ # ccxt 4.5.73 currently constrains cryptography to the 50.x release line. cryptography>=50.0.0,<51 @@ -36,18 +36,18 @@ prometheus-client>=0.26.0,<1 # Redis cache (optional but recommended for multi-worker setups). # Celery 5.6 / Kombu 5.6 currently require redis-py <6.5. This client remains # compatible with the Redis 8 server used by the production stack. -redis>=6.4.0,<6.5 +redis>=8.1.0,<8.2 # Durable background jobs and periodic maintenance celery[redis]>=5.6.3,<6 # Production WSGI server -gunicorn>=26.0.0 +gunicorn>=26.1.0 # OpenAPI generation (flask-smorest) flask-smorest>=0.47.0,<0.48 -marshmallow>=4.3.0,<5 +marshmallow>=4.3.1,<5 PyYAML>=6.0.3 # Server-side PDF export for AI analysis reports # GHSA-fp3f-mc75-235c / GHSA-fwg2-594c-jp42 (unbounded PDF resource use); 6.15.0+ -pypdf>=6.15.0,<7 +pypdf>=6.16.1,<7 reportlab>=5.0.0 # Password hashing bcrypt>=5.0.0 @@ -58,4 +58,4 @@ ib_insync>=0.9.86 # tavily-python>=0.3.0 # SerpAPI - Google/Bing search scraper (free 100 requests/month) # google-search-results>=2.4.0 -alpaca-py>=0.43.5 +alpaca-py>=0.44.0