From bd3549f03c7c9eac750309635c94d9bc33833d7d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 15:36:52 +0000 Subject: [PATCH] Bump the python-runtime group in /backend_api_python with 7 updates Updates the requirements on [ccxt](https://github.com/ccxt/ccxt), [litellm](https://github.com/BerriAI/litellm), [certifi](https://github.com/certifi/python-certifi), [akshare](https://github.com/akfamily/akshare), [cryptography](https://github.com/pyca/cryptography), [redis](https://github.com/redis/redis-py) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version. Updates `ccxt` to 4.5.71 - [Release notes](https://github.com/ccxt/ccxt/releases) - [Commits](https://github.com/ccxt/ccxt/compare/v4.5.69...v4.5.71) Updates `litellm` to 1.95.0 - [Release notes](https://github.com/BerriAI/litellm/releases) - [Commits](https://github.com/BerriAI/litellm/compare/v1.93.0...v1.95.0) Updates `certifi` to 2026.7.22 - [Commits](https://github.com/certifi/python-certifi/compare/2026.06.17...2026.07.22) Updates `akshare` to 1.18.81 - [Release notes](https://github.com/akfamily/akshare/releases) - [Changelog](https://github.com/akfamily/akshare/blob/main/docs/changelog.md) - [Commits](https://github.com/akfamily/akshare/compare/release-v1.18.80...release-v1.18.81) Updates `cryptography` to 50.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/49.0.0...50.0.0) Updates `redis` to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](https://github.com/redis/redis-py/compare/v6.4.0...v8.1.0) Updates `ruff` to 0.16.1 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.0...0.16.1) --- updated-dependencies: - dependency-name: ccxt dependency-version: 4.5.71 dependency-type: direct:production dependency-group: python-runtime - dependency-name: litellm dependency-version: 1.95.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: certifi dependency-version: 2026.7.22 dependency-type: direct:production dependency-group: python-runtime - dependency-name: akshare dependency-version: 1.18.81 dependency-type: direct:production dependency-group: python-runtime - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: ruff dependency-version: 0.16.1 dependency-type: direct:development dependency-group: python-runtime ... Signed-off-by: dependabot[bot] --- backend_api_python/requirements-dev.txt | 2 +- backend_api_python/requirements.txt | 12 ++++++------ 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/backend_api_python/requirements-dev.txt b/backend_api_python/requirements-dev.txt index a322b7323..2e577184d 100644 --- a/backend_api_python/requirements-dev.txt +++ b/backend_api_python/requirements-dev.txt @@ -3,4 +3,4 @@ pip-audit>=2.10.1,<3 pytest>=9.1.1,<10 pytest-cov>=7.1.0,<8 pytest-timeout>=2.4.0,<3 -ruff>=0.16.0,<0.17 +ruff>=0.16.1,<0.17 diff --git a/backend_api_python/requirements.txt b/backend_api_python/requirements.txt index c1d0bb130..d81f35a96 100644 --- a/backend_api_python/requirements.txt +++ b/backend_api_python/requirements.txt @@ -4,23 +4,23 @@ Werkzeug>=3.1.8 flask-cors==6.0.5 finnhub-python>=2.4.29 yfinance>=1.5.2 -ccxt>=4.5.69 +ccxt>=4.5.71 pandas>=3.0.5 # Strategy API V2 technical indicator runtime. The 0.6.x wheels bundle the C library. TA-Lib==0.7.1 exchange-calendars>=4.13.2,<5 requests>=2.34.2 websocket-client>=1.9.0,<2 -litellm>=1.93.0,<1.94 +litellm>=1.95.0,<1.96 # ccxt 4.5.69/4.5.70 pins certifi==2026.6.17. Keep the direct floor # aligned with the exchange client until ccxt relaxes its constraint. -certifi>=2026.6.17 +certifi>=2026.7.22 PySocks>=1.7.1 -akshare>=1.18.80 +akshare>=1.18.81 # GHSA-752w-5fwx-jx9f (crit header); 2.12.0+ PyJWT>=2.13.0,<3 python-dotenv>=1.2.2 -cryptography>=49.0.0 +cryptography>=50.0.0 # TOTP MFA and QR code generation pyotp>=2.10.0 qrcode[pil]>=8.2 @@ -31,7 +31,7 @@ prometheus-client>=0.26.0,<1 # Redis cache (optional but recommended for multi-worker setups). # Celery 5.6 / Kombu 5.6 currently require redis-py <6.5. This client remains # compatible with the Redis 8 server used by the production stack. -redis>=6.4.0,<6.5 +redis>=8.1.0,<8.2 # Durable background jobs and periodic maintenance celery[redis]>=5.6.3,<6 # Production WSGI server