From ba20fa09f6945b0ddc448fe2a543cf6c95c54f72 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 22 Oct 2026 04:14:00 +0000
Subject: [PATCH] chore(deps): bump the python-runtime group across 1 directory
 with 8 updates

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.5
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: ta-lib
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-runtime
- dependency-name: litellm
  dependency-version: 1.106.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: certifi
  dependency-version: 2026.10.18
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: confluent-kafka
  dependency-version: 2.16.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: redis
  dependency-version: 8.1.0
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: pypdf
  dependency-version: 6.21.1
  dependency-type: direct:production
  dependency-group: python-runtime
- dependency-name: ruff
  dependency-version: 0.17.1
  dependency-type: direct:development
  dependency-group: python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 backend_api_python/requirements-dev.txt |  2 +-
 backend_api_python/requirements.txt     | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/backend_api_python/requirements-dev.txt b/backend_api_python/requirements-dev.txt
index c141bc961..af6b93c61 100644
--- a/backend_api_python/requirements-dev.txt
+++ b/backend_api_python/requirements-dev.txt
@@ -3,4 +3,4 @@ pip-audit>=2.10.1,<3
 pytest>=9.1.1,<10
 pytest-cov>=7.1.0,<8
 pytest-timeout>=2.4.0,<3
-ruff>=0.16.10,<0.17
+ruff>=0.17.1,<0.18
diff --git a/backend_api_python/requirements.txt b/backend_api_python/requirements.txt
index 3956c08d2..34559109f 100644
--- a/backend_api_python/requirements.txt
+++ b/backend_api_python/requirements.txt
@@ -6,10 +6,10 @@ finnhub-python>=2.4.29
 yfinance>=1.7.0
 # GHSA-cq5v-8q36-5273 (C parser OOB read), GHSA-mfx4-hv73-q22v and
 # GHSA-mq44-7p77-q5h7 (WebSocket parsing); 3.14.3+
-aiohttp>=3.14.4,<3.15
+aiohttp>=3.14.5,<3.15
 pandas>=3.0.6
 # Strategy API V2 technical indicator runtime. Wheels bundle the C library.
-TA-Lib==0.8.1
+TA-Lib==0.8.2
 exchange-calendars>=4.13.2,<5
 requests>=2.34.2
 # CVE-2026-97687 and related redirect/decompression advisories; 2.8.0+
@@ -18,8 +18,8 @@ websocket-client>=1.9.2,<2
 # websocket-client 1.9+ delegates SOCKS4/5 proxy connections to python-socks.
 python-socks>=3.1.1,<4
 # CVE-2026-84377; 1.93.2+
-litellm>=1.104.0,<1.105
-certifi>=2026.7.22
+litellm>=1.106.0,<1.107
+certifi>=2026.10.18
 PySocks>=1.7.1
 akshare>=1.19.1
 # GHSA-752w-5fwx-jx9f and 2026 JWT validation advisories; 2.15.0+
@@ -35,11 +35,11 @@ psycopg2-binary>=2.9.13
 # Runtime metrics
 prometheus-client>=0.26.0,<1
 # Kafka event backbone
-confluent-kafka>=2.15.1,<3
+confluent-kafka>=2.16.0,<3
 # Redis cache (optional but recommended for multi-worker setups).
 # Celery 5.6 / Kombu 5.6 currently require redis-py <6.5. This client remains
 # compatible with the Redis 8 server used by the production stack.
-redis>=6.4.0,<6.5
+redis>=8.1.0,<8.2
 # Durable background jobs and periodic maintenance
 celery[redis]>=5.6.3,<6
 # Production WSGI server
@@ -50,7 +50,7 @@ marshmallow>=4.3.1,<5
 PyYAML>=6.0.3
 # Server-side PDF export for AI analysis reports
 # PDF parser security advisories; 6.19.0+
-pypdf>=6.19.0,<7
+pypdf>=6.21.1,<7
 reportlab>=5.0.1
 # Password hashing
 bcrypt>=5.0.0