From 7b3951f1e5d1c811dd4bf9e19d51c8dd3cac2fe6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:01:24 +0000 Subject: [PATCH 01/12] chore(deps-dev): bump types-requests in the types group Bumps the types group with 1 update: [types-requests](https://github.com/typeshed-internal/stub_uploader). Updates `types-requests` from 2.32.4.20250809 to 2.32.4.20250913 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) --- updated-dependencies: - dependency-name: types-requests dependency-version: 2.32.4.20250913 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: types ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index c2e56eeb7..5de43d164 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -27,6 +27,6 @@ nbconvert==7.16.6 scipy-stubs==1.16.1.1 # keep in sync with `scipy` in `requirements-hyperopt.txt` types-cachetools==6.2.0.20250827 types-filelock==3.2.7 -types-requests==2.32.4.20250809 +types-requests==2.32.4.20250913 types-tabulate==0.9.0.20241207 types-python-dateutil==2.9.0.20250822 From 26ff88c71af8525a36659f23f81bf192331af4ec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:01:42 +0000 Subject: [PATCH 02/12] chore(deps): bump astral-sh/setup-uv from 6.6.1 to 6.7.0 Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 6.6.1 to 6.7.0. - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/557e51de59eb14aaaba2ed9621916900a91d50c6...b75a909f75acd358c2196fb9a5f1299a9a8868a4) --- updated-dependencies: - dependency-name: astral-sh/setup-uv dependency-version: 6.7.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 90ce6bfd8..0f8a3c38e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -38,7 +38,7 @@ jobs: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1 + uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0 with: activate-environment: true enable-cache: true @@ -159,7 +159,7 @@ jobs: check-latest: true - name: Install uv - uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1 + uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0 with: activate-environment: true enable-cache: true @@ -271,7 +271,7 @@ jobs: python-version: ${{ matrix.python-version }} - name: Install uv - uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1 + uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0 with: activate-environment: true enable-cache: true @@ -421,7 +421,7 @@ jobs: python-version: "3.12" - name: Install uv - uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1 + uses: astral-sh/setup-uv@b75a909f75acd358c2196fb9a5f1299a9a8868a4 # v6.7.0 with: activate-environment: true enable-cache: true From 29e35cf824661c9f421d45c891693dad18b01af4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:01:45 +0000 Subject: [PATCH 03/12] chore(deps): bump zizmorcore/zizmor-action from 0.1.2 to 0.2.0 Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.1.2 to 0.2.0. - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/5ca5fc7a4779c5263a3ffa0e1f693009994446d1...e673c3917a1aef3c65c972347ed84ccd013ecda4) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/zizmor.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 1cd1c1ac1..e3caca64b 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -26,4 +26,4 @@ jobs: persist-credentials: false - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@5ca5fc7a4779c5263a3ffa0e1f693009994446d1 # v0.1.2 + uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0 From 92f8b2dd02123ac9ac00f6eca9e1e1a4c967d0ed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:01:47 +0000 Subject: [PATCH 04/12] chore(deps-dev): bump the pytest group with 2 updates Bumps the pytest group with 2 updates: [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) and [pytest-cov](https://github.com/pytest-dev/pytest-cov). Updates `pytest-asyncio` from 1.1.0 to 1.2.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.1.0...v1.2.0) Updates `pytest-cov` from 6.3.0 to 7.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest-cov/compare/v6.3.0...v7.0.0) --- updated-dependencies: - dependency-name: pytest-asyncio dependency-version: 1.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pytest - dependency-name: pytest-cov dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: pytest ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index c2e56eeb7..c48e2033c 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -10,8 +10,8 @@ ruff==0.12.12 mypy==1.17.1 pre-commit==4.3.0 pytest==8.4.2 -pytest-asyncio==1.1.0 -pytest-cov==6.3.0 +pytest-asyncio==1.2.0 +pytest-cov==7.0.0 pytest-mock==3.15.0 pytest-random-order==1.2.0 pytest-timeout==2.4.0 From 5396519b2065683c539baae9589247914015598b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:02:30 +0000 Subject: [PATCH 05/12] chore(deps): bump bottleneck from 1.5.0 to 1.6.0 Bumps [bottleneck](https://github.com/pydata/bottleneck) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/pydata/bottleneck/releases) - [Changelog](https://github.com/pydata/bottleneck/blob/master/RELEASE.rst) - [Commits](https://github.com/pydata/bottleneck/compare/v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: bottleneck dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index b64c5eda6..18c4f1120 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ numpy==2.3.2 pandas==2.3.2 -bottleneck==1.5.0 +bottleneck==1.6.0 numexpr==2.11.0 # Indicator libraries ft-pandas-ta==0.3.15 From 992d173adcf96ffe07401bc2e3b117cfcb427643 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:03:41 +0000 Subject: [PATCH 06/12] chore(deps): bump scikit-learn from 1.7.1 to 1.7.2 Bumps [scikit-learn](https://github.com/scikit-learn/scikit-learn) from 1.7.1 to 1.7.2. - [Release notes](https://github.com/scikit-learn/scikit-learn/releases) - [Commits](https://github.com/scikit-learn/scikit-learn/compare/1.7.1...1.7.2) --- updated-dependencies: - dependency-name: scikit-learn dependency-version: 1.7.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements-freqai.txt | 2 +- requirements-hyperopt.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-freqai.txt b/requirements-freqai.txt index 9c9b1c853..059512b7b 100644 --- a/requirements-freqai.txt +++ b/requirements-freqai.txt @@ -3,7 +3,7 @@ -r requirements-plot.txt # Required for freqai -scikit-learn==1.7.1 +scikit-learn==1.7.2 joblib==1.5.2 catboost==1.2.8; 'arm' not in platform_machine lightgbm==4.6.0 diff --git a/requirements-hyperopt.txt b/requirements-hyperopt.txt index 4d31f6042..40e108cb0 100644 --- a/requirements-hyperopt.txt +++ b/requirements-hyperopt.txt @@ -3,7 +3,7 @@ # Required for hyperopt scipy==1.16.1 -scikit-learn==1.7.1 +scikit-learn==1.7.2 filelock==3.19.1 optuna==4.5.0 cmaes==0.12.0 From be5969a1e1d492f4200e11e2185634713db01a64 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:03:48 +0000 Subject: [PATCH 07/12] chore(deps): bump python-telegram-bot from 22.3 to 22.4 Bumps [python-telegram-bot](https://github.com/python-telegram-bot/python-telegram-bot) from 22.3 to 22.4. - [Release notes](https://github.com/python-telegram-bot/python-telegram-bot/releases) - [Commits](https://github.com/python-telegram-bot/python-telegram-bot/compare/v22.3...v22.4) --- updated-dependencies: - dependency-name: python-telegram-bot dependency-version: '22.4' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index b64c5eda6..17c03ee23 100644 --- a/requirements.txt +++ b/requirements.txt @@ -11,7 +11,7 @@ ccxt==4.5.3 cryptography==45.0.7 aiohttp==3.12.15 SQLAlchemy==2.0.43 -python-telegram-bot==22.3 +python-telegram-bot==22.4 # can't be hard-pinned due to telegram-bot pinning httpx with ~ httpx>=0.24.1 humanize==4.13.0 From ab7c1ec24f6f3b7076fda187f1027ff74c24cdec Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 03:54:21 +0000 Subject: [PATCH 08/12] chore(deps): bump ccxt from 4.5.3 to 4.5.4 Bumps [ccxt](https://github.com/ccxt/ccxt) from 4.5.3 to 4.5.4. - [Release notes](https://github.com/ccxt/ccxt/releases) - [Changelog](https://github.com/ccxt/ccxt/blob/master/exchanges.cfg) - [Commits](https://github.com/ccxt/ccxt/compare/v4.5.3...v4.5.4) --- updated-dependencies: - dependency-name: ccxt dependency-version: 4.5.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index b64c5eda6..28d86ade9 100644 --- a/requirements.txt +++ b/requirements.txt @@ -7,7 +7,7 @@ ft-pandas-ta==0.3.15 ta-lib==0.6.7 technical==1.5.3 -ccxt==4.5.3 +ccxt==4.5.4 cryptography==45.0.7 aiohttp==3.12.15 SQLAlchemy==2.0.43 From 4b4d090d39ec94e01877d2b205bfd4b832096253 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 04:56:25 +0000 Subject: [PATCH 09/12] chore(deps-dev): bump mypy from 1.17.1 to 1.18.1 Bumps [mypy](https://github.com/python/mypy) from 1.17.1 to 1.18.1. - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](https://github.com/python/mypy/compare/v1.17.1...v1.18.1) --- updated-dependencies: - dependency-name: mypy dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements-dev.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements-dev.txt b/requirements-dev.txt index c48e2033c..e2a7219a6 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -7,7 +7,7 @@ -r docs/requirements-docs.txt ruff==0.12.12 -mypy==1.17.1 +mypy==1.18.1 pre-commit==4.3.0 pytest==8.4.2 pytest-asyncio==1.2.0 From 776d9ac5e09da1ebd30fe62ffcf659e08f59bc20 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 05:00:16 +0000 Subject: [PATCH 10/12] chore(deps): bump numexpr from 2.11.0 to 2.12.1 Bumps [numexpr](https://github.com/pydata/numexpr) from 2.11.0 to 2.12.1. - [Release notes](https://github.com/pydata/numexpr/releases) - [Changelog](https://github.com/pydata/numexpr/blob/master/RELEASE_NOTES.rst) - [Commits](https://github.com/pydata/numexpr/compare/v2.11.0...v2.12.1) --- updated-dependencies: - dependency-name: numexpr dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 88c80310b..447962382 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,7 +1,7 @@ numpy==2.3.2 pandas==2.3.2 bottleneck==1.6.0 -numexpr==2.11.0 +numexpr==2.12.1 # Indicator libraries ft-pandas-ta==0.3.15 ta-lib==0.6.7 From d5620cf8b5c886f825bbb899bba2b2ab0a167915 Mon Sep 17 00:00:00 2001 From: Matthias Date: Mon, 15 Sep 2025 07:12:06 +0200 Subject: [PATCH 11/12] chore: bump types-requests in pre-commit config --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 68352dd0c..7024a04f0 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -28,7 +28,7 @@ repos: additional_dependencies: - types-cachetools==6.2.0.20250827 - types-filelock==3.2.7 - - types-requests==2.32.4.20250809 + - types-requests==2.32.4.20250913 - types-tabulate==0.9.0.20241207 - types-python-dateutil==2.9.0.20250822 - scipy-stubs==1.16.1.1 From 74f459d7edaab5b5eff84dd18e9d02a069f63301 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Sep 2025 05:59:20 +0000 Subject: [PATCH 12/12] chore(deps): bump numpy from 2.3.2 to 2.3.3 Bumps [numpy](https://github.com/numpy/numpy) from 2.3.2 to 2.3.3. - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](https://github.com/numpy/numpy/compare/v2.3.2...v2.3.3) --- updated-dependencies: - dependency-name: numpy dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 1c5518190..e195c30c5 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ -numpy==2.3.2 +numpy==2.3.3 pandas==2.3.2 bottleneck==1.6.0 numexpr==2.12.1