From a2273f5890785e21294c9db470cebb667ae24a4d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 25 Oct 2026 14:17:26 +0000 Subject: [PATCH] chore(deps): bump the python-runtime group Updates the requirements on [pandas](https://github.com/pandas-dev/pandas) and [reportlab](https://www.reportlab.com/) to permit the latest version. Updates `pandas` to 3.1.0 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](https://github.com/pandas-dev/pandas/compare/v3.0.6...v3.1.0) Updates `reportlab` to 5.1.0 --- updated-dependencies: - dependency-name: pandas dependency-version: 3.1.0 dependency-type: direct:production dependency-group: python-runtime - dependency-name: reportlab dependency-version: 5.1.0 dependency-type: direct:production dependency-group: python-runtime ... Signed-off-by: dependabot[bot] --- backend_api_python/requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend_api_python/requirements.txt b/backend_api_python/requirements.txt index c6eb31ed6..c3faeded8 100644 --- a/backend_api_python/requirements.txt +++ b/backend_api_python/requirements.txt @@ -7,7 +7,7 @@ yfinance>=1.7.0 # GHSA-cq5v-8q36-5273 (C parser OOB read), GHSA-mfx4-hv73-q22v and # GHSA-mq44-7p77-q5h7 (WebSocket parsing); 3.14.3+ aiohttp>=3.14.5,<3.15 -pandas>=3.0.6 +pandas>=3.1.0 # Strategy API V2 technical indicator runtime. Wheels bundle the C library. TA-Lib==0.8.2 exchange-calendars>=4.13.2,<5 @@ -57,7 +57,7 @@ PyYAML>=6.0.3 # Server-side PDF export for AI analysis reports # PDF parser security advisories through CVE-2026-115580; 6.21.2+ pypdf>=6.21.2,<7 -reportlab>=5.0.1 +reportlab>=5.1.0 # Password hashing bcrypt>=5.0.0 # Interactive Brokers trading (optional, for US stock trading via TWS/IB Gateway)