diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 90ce6bfd8..0f8a3c38e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
         python-version: ${{ matrix.python-version }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
+      uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0
       with:
         activate-environment: true
         enable-cache: true
@@ -159,7 +159,7 @@ jobs:
         check-latest: true
 
     - name: Install uv
-      uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
+      uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0
       with:
         activate-environment: true
         enable-cache: true
@@ -271,7 +271,7 @@ jobs:
         python-version: ${{ matrix.python-version }}
 
     - name: Install uv
-      uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
+      uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0
       with:
         activate-environment: true
         enable-cache: true
@@ -421,7 +421,7 @@ jobs:
         python-version: "3.12"
 
     - name: Install uv
-      uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
+      uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0
       with:
         activate-environment: true
         enable-cache: true
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
index 1cd1c1ac1..e3caca64b 100644
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -26,4 +26,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@5ca5fc7a4779c5263a3ffa0e1f693009994446d1 # v0.1.2
+        uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 68352dd0c..7024a04f0 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -28,7 +28,7 @@ repos:
         additional_dependencies:
           - types-cachetools==6.2.0.20250827
           - types-filelock==3.2.7
-          - types-requests==2.32.4.20250809
+          - types-requests==2.32.4.20250913
           - types-tabulate==0.9.0.20241207
           - types-python-dateutil==2.9.0.20250822
           - scipy-stubs==1.16.1.1
diff --git a/requirements-dev.txt b/requirements-dev.txt
index c2e56eeb7..b505ef862 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -7,11 +7,11 @@
 -r docs/requirements-docs.txt
 
 ruff==0.12.12
-mypy==1.17.1
+mypy==1.18.1
 pre-commit==4.3.0
 pytest==8.4.2
-pytest-asyncio==1.1.0
-pytest-cov==6.3.0
+pytest-asyncio==1.2.0
+pytest-cov==7.0.0
 pytest-mock==3.15.0
 pytest-random-order==1.2.0
 pytest-timeout==2.4.0
@@ -27,6 +27,6 @@ nbconvert==7.16.6
 scipy-stubs==1.16.1.1  # keep in sync with `scipy` in `requirements-hyperopt.txt`
 types-cachetools==6.2.0.20250827
 types-filelock==3.2.7
-types-requests==2.32.4.20250809
+types-requests==2.32.4.20250913
 types-tabulate==0.9.0.20241207
 types-python-dateutil==2.9.0.20250822
diff --git a/requirements-freqai.txt b/requirements-freqai.txt
index 9c9b1c853..059512b7b 100644
--- a/requirements-freqai.txt
+++ b/requirements-freqai.txt
@@ -3,7 +3,7 @@
 -r requirements-plot.txt
 
 # Required for freqai
-scikit-learn==1.7.1
+scikit-learn==1.7.2
 joblib==1.5.2
 catboost==1.2.8; 'arm' not in platform_machine
 lightgbm==4.6.0
diff --git a/requirements-hyperopt.txt b/requirements-hyperopt.txt
index 4d31f6042..40e108cb0 100644
--- a/requirements-hyperopt.txt
+++ b/requirements-hyperopt.txt
@@ -3,7 +3,7 @@
 
 # Required for hyperopt
 scipy==1.16.1
-scikit-learn==1.7.1
+scikit-learn==1.7.2
 filelock==3.19.1
 optuna==4.5.0
 cmaes==0.12.0
diff --git a/requirements.txt b/requirements.txt
index b64c5eda6..e195c30c5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,17 +1,17 @@
-numpy==2.3.2
+numpy==2.3.3
 pandas==2.3.2
-bottleneck==1.5.0
-numexpr==2.11.0
+bottleneck==1.6.0
+numexpr==2.12.1
 # Indicator libraries
 ft-pandas-ta==0.3.15
 ta-lib==0.6.7
 technical==1.5.3
 
-ccxt==4.5.3
+ccxt==4.5.4
 cryptography==45.0.7
 aiohttp==3.12.15
 SQLAlchemy==2.0.43
-python-telegram-bot==22.3
+python-telegram-bot==22.4
 # can't be hard-pinned due to telegram-bot pinning httpx with ~
 httpx>=0.24.1
 humanize==4.13.0