Update Dependencies Jul 20 (auto)

[maread99]

Generated by Claude.

Automated dependency update produced via the dependencies-management skill.

Python dependencies

• Upgraded the uv lock file (uv lock --upgrade) and regenerated requirements.txt. Notable bumps include numpy (2.4.6 → 2.5.1 on Python ≥3.12), mypy 2.1.0 → 2.3.0, pytest 9.1.0 → 9.1.1, pillow 12.2.0 → 12.3.0, certifi, cffi, charset-normalizer, ipython, jupyterlab, korean-lunar-calendar, tqdm, typing-extensions, tzdata and others.
• The Yahoo data stack (market-prices, yahooquery, curl-cffi) was already at its latest allowed release and is unchanged by this PR.

GitHub Actions

• actions/checkout @v6 → @v7
• astral-sh/setup-uv @v8.2.0 → @v8.3.2
• actions/setup-python (@v6) and release-drafter/release-drafter (@v7) already track the latest major tag — no change.

Pre-commit hooks

• astral-sh/ruff-pre-commit v0.15.17 → v0.15.22
• pre-commit/pre-commit-hooks (v6.0.0) and pre-commit/action (@v3.0.1) already at the latest release — no change.

Testing

• No source revisions were required to support the updated dependencies.
• CI: all checks green across the full matrix (ubuntu / macOS / windows × Python 3.10 & 3.14) plus pre-commit.
• The ubuntu-latest, 3.10 job initially failed with TypeError: string indices must be integers from market_prices while parsing live Yahoo quoteType responses (PricesYahoo.__init__). This is intermittent Yahoo rate-limiting of the runner — the same unchanged Yahoo stack passed on every other job, the error count varied between runs, and the job passed cleanly on re-run after a cooldown. Not related to the dependency bump.
• All emitted warnings originate in dependency code (bqscales, exchange_calendars, traitlets) or are a pre-existing pandas FutureWarning in analysis.py unrelated to this update; none are fixable within the scope of a dependency bump.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Rj49SFQnAK6tUS7nTAHgS2