From 58123092d772c8c36bde24e31b53235a8aeece4b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 15:36:01 +0000 Subject: [PATCH] chore(deps): bump the python-runtime group Updates the requirements on [pandas](https://github.com/pandas-dev/pandas), [python-socks](https://github.com/romis2012/python-socks), [litellm](https://github.com/BerriAI/litellm), [certifi](https://github.com/certifi/python-certifi), [akshare](https://github.com/akfamily/akshare), [msgpack](https://github.com/msgpack/msgpack-python), [pypdf](https://github.com/py-pdf/pypdf), [reportlab](https://www.reportlab.com/), [tigeropen](https://github.com/tigerfintech/openapi-python-sdk) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version. Updates `pandas` to 3.1.0 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](https://github.com/pandas-dev/pandas/compare/v3.0.6...v3.1.0) Updates `python-socks` to 3.2.0 - [Release notes](https://github.com/romis2012/python-socks/releases) - [Commits](https://github.com/romis2012/python-socks/compare/v3.1.1...v3.2.0) Updates `litellm` to 1.106.4 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](https://github.com/BerriAI/litellm/compare/v1.106.2...v1.106.4) Updates `certifi` to 2026.10.23 - [Commits](https://github.com/certifi/python-certifi/compare/2026.10.19...2026.10.23) Updates `akshare` to 1.20.0 - [Release notes](https://github.com/akfamily/akshare/releases) - [Changelog](https://github.com/akfamily/akshare/blob/main/docs/changelog.md) - [Commits](https://github.com/akfamily/akshare/compare/release-v1.19.1...release-v1.20.0) Updates `msgpack` to 1.2.4 - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/msgpack/msgpack-python/compare/v1.2.3...v1.2.4) Updates `pypdf` to 6.21.3 - [Release notes](https://github.com/py-pdf/pypdf/releases) - [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md) - [Commits](https://github.com/py-pdf/pypdf/compare/6.21.2...6.21.3) Updates `reportlab` to 5.1.0 Updates `tigeropen` from 3.7.2 to 3.8.0 - [Release notes](https://github.com/tigerfintech/openapi-python-sdk/releases) - [Changelog](https://github.com/tigerfintech/openapi-python-sdk/blob/v3.8.0/CHANGELOG.md) - [Commits](https://github.com/tigerfintech/openapi-python-sdk/compare/v3.7.2...v3.8.0) Updates `ruff` to 0.17.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.17.1...0.17.3) --- updated-dependencies: - dependency-name: pandas dependency-version: 3.1.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: python-socks dependency-version: 3.2.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: litellm dependency-version: 1.106.4 dependency-type: direct:production dependency-group: python-runtime - dependency-name: certifi dependency-version: 2026.10.23 dependency-type: direct:production dependency-group: python-runtime - dependency-name: akshare dependency-version: 1.20.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: msgpack dependency-version: 1.2.4 dependency-type: direct:production dependency-group: python-runtime - dependency-name: pypdf dependency-version: 6.21.3 dependency-type: direct:production dependency-group: python-runtime - dependency-name: reportlab dependency-version: 5.1.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: tigeropen dependency-version: 3.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-runtime - dependency-name: ruff dependency-version: 0.17.3 dependency-type: direct:development dependency-group: python-runtime ... Signed-off-by: dependabot[bot] --- backend_api_python/requirements-dev.txt | 2 +- backend_api_python/requirements.txt | 18 +++++++++--------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/backend_api_python/requirements-dev.txt b/backend_api_python/requirements-dev.txt index 101a5c92b..5d64bcc3d 100644 --- a/backend_api_python/requirements-dev.txt +++ b/backend_api_python/requirements-dev.txt @@ -3,5 +3,5 @@ pip-audit>=2.10.1,<3 pytest>=9.1.1,<10 pytest-cov>=7.1.0,<8 pytest-timeout>=2.4.0,<3 -ruff>=0.17.1,<0.18 +ruff>=0.17.3,<0.18 xlrd>=2.0.2,<3 diff --git a/backend_api_python/requirements.txt b/backend_api_python/requirements.txt index cbfa0c000..e527c7a08 100644 --- a/backend_api_python/requirements.txt +++ b/backend_api_python/requirements.txt @@ -7,7 +7,7 @@ yfinance>=1.7.0 # GHSA-cq5v-8q36-5273 (C parser OOB read), GHSA-mfx4-hv73-q22v and # GHSA-mq44-7p77-q5h7 (WebSocket parsing); 3.14.3+ aiohttp>=3.14.5,<3.15 -pandas>=3.0.6 +pandas>=3.1.0 # Strategy API V2 technical indicator runtime. Wheels bundle the C library. TA-Lib==0.8.2 exchange-calendars>=4.13.2,<5 @@ -20,12 +20,12 @@ requests>=2.34.2 urllib3>=2.8.0,<3 websocket-client>=1.9.2,<2 # websocket-client 1.9+ delegates SOCKS4/5 proxy connections to python-socks. -python-socks>=3.1.1,<4 +python-socks>=3.2.0,<4 # CVE-2026-84377; 1.93.2+ -litellm>=1.106.2,<1.107 -certifi>=2026.10.19 +litellm>=1.106.4,<1.107 +certifi>=2026.10.23 PySocks>=1.7.1 -akshare>=1.19.1 +akshare>=1.20.0 # GHSA-752w-5fwx-jx9f and 2026 JWT validation advisories; 2.15.0+ PyJWT>=2.15.1,<3 python-dotenv>=1.2.4 @@ -47,7 +47,7 @@ confluent-kafka>=2.16.0,<3 # compatible with the Redis 8 server used by the production stack. redis>=6.4.0,<6.5 # CVE-2026-114613; 1.2.3+ -msgpack>=1.2.3,<2 +msgpack>=1.2.4,<2 # Durable background jobs and periodic maintenance celery[redis]>=5.6.3,<6 # Production WSGI server @@ -58,8 +58,8 @@ marshmallow>=4.3.1,<5 PyYAML>=6.0.3 # Server-side PDF export for AI analysis reports # PDF parser security advisories through CVE-2026-115580; 6.21.2+ -pypdf>=6.21.2,<7 -reportlab>=5.0.1 +pypdf>=6.21.3,<7 +reportlab>=5.1.0 # Password hashing bcrypt>=5.0.0 # Interactive Brokers trading (optional, for US stock trading via TWS/IB Gateway) @@ -71,4 +71,4 @@ ib_insync>=0.9.86 # google-search-results>=2.4.0 alpaca-py>=0.44.0 # Official Tiger Brokers OpenAPI SDK. -tigeropen==3.7.2 +tigeropen==3.8.0