diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d6c20a6bc..ecdbe9d8a 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -29,6 +29,10 @@ updates:
     mkdocs:
       patterns:
         - "mkdocs*"
+    scipy:
+      patterns:
+        - "scipy"
+        - "scipy-stubs"
 
 - package-ecosystem: "github-actions"
   directory: "/"
diff --git a/.github/workflows/devcontainer-build.yml b/.github/workflows/devcontainer-build.yml
index 9e49ffed3..d006c75f7 100644
--- a/.github/workflows/devcontainer-build.yml
+++ b/.github/workflows/devcontainer-build.yml
@@ -28,7 +28,7 @@ jobs:
       with:
         persist-credentials: false
     - name: Login to GitHub Container Registry
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index a0282e760..af289e37c 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -21,7 +21,7 @@ repos:
         # stages: [push]
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: "v1.17.0"
+    rev: "v1.17.1"
     hooks:
       - id: mypy
         exclude: build_helpers
@@ -31,8 +31,8 @@ repos:
           - types-requests==2.32.4.20250611
           - types-tabulate==0.9.0.20241207
           - types-python-dateutil==2.9.0.20250708
-          - scipy-stubs==1.16.0.2
-          - SQLAlchemy==2.0.41
+          - scipy-stubs==1.16.1.0
+          - SQLAlchemy==2.0.42
         # stages: [push]
 
   - repo: https://github.com/pycqa/isort
@@ -44,7 +44,7 @@ repos:
 
   - repo: https://github.com/charliermarsh/ruff-pre-commit
     # Ruff version.
-    rev: 'v0.12.5'
+    rev: 'v0.12.7'
     hooks:
       - id: ruff
       - id: ruff-format
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 2bcfc7d7f..5b506522b 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -24,7 +24,7 @@ time-machine==2.16.0
 nbconvert==7.16.6
 
 # mypy types
-scipy-stubs==1.16.0.2  # keep in sync with `scipy` in `requirements-hyperopt.txt`
+scipy-stubs==1.16.1.0  # keep in sync with `scipy` in `requirements-hyperopt.txt`
 types-cachetools==6.1.0.20250717
 types-filelock==3.2.7
 types-requests==2.32.4.20250611
diff --git a/requirements.txt b/requirements.txt
index 9cf9ba65d..63e7e4edb 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -10,7 +10,7 @@ technical==1.5.2
 ccxt==4.4.98
 cryptography==45.0.5
 aiohttp==3.12.15
-SQLAlchemy==2.0.41
+SQLAlchemy==2.0.42
 python-telegram-bot==22.3
 # can't be hard-pinned due to telegram-bot pinning httpx with ~
 httpx>=0.24.1
diff --git a/tests/exchange_online/conftest.py b/tests/exchange_online/conftest.py
index 2f181d610..65d11f949 100644
--- a/tests/exchange_online/conftest.py
+++ b/tests/exchange_online/conftest.py
@@ -415,13 +415,14 @@ EXCHANGES = {
         "timeframe": "1h",
         "candle_count": 1000,
     },
-    "htx": {
-        "pair": "ETH/BTC",
-        "stake_currency": "BTC",
-        "hasQuoteVolume": True,
-        "timeframe": "1h",
-        "candle_count": 1000,
-    },
+    # TODO: re-enable htx once certificates work again
+    # "htx": {
+    #     "pair": "ETH/BTC",
+    #     "stake_currency": "BTC",
+    #     "hasQuoteVolume": True,
+    #     "timeframe": "1h",
+    #     "candle_count": 1000,
+    # },
     "bitvavo": {
         "pair": "BTC/EUR",
         "stake_currency": "EUR",