v2.9.0

What's Changed

Requires Python 3.10+. Python 3.9 reached end of life in October 2025, and the fixes for recent urllib3 security advisories require 3.10. On Python 3.9, pip will keep installing v2.8.0.

pip install --upgrade massive

New

• Corporate networks: both clients now honor SSL_CERT_FILE / REQUESTS_CA_BUNDLE for TLS verification, or take a ca_certs= argument. RESTClient also takes a proxy= URL (WebSocket already uses HTTPS_PROXY). See the Network Configuration section of the README.
• Faster multithreaded use: RESTClient keeps up to maxsize=10 connections open for reuse (previously 1), and other urllib3 pool options can be passed with connection_pool_kw.
• Indices snapshots: IndicesSnapshot now includes last_updated and timeframe, and the new list_snapshot_indices returns all pages.
• SEC filings: list_stocks_filings_8k_disclosures and list_stocks_taxonomies_disclosures (vX).

Fixes

• *_any_of arguments given a comma-separated string (e.g. ticker_any_of="AAPL,VZ") were split into characters and returned the wrong data.
• WebSocket server messages such as "Subscription limit reached", max_connections and slow_consumer are now logged as warnings instead of being silently dropped.
• Dependency updates for security advisories in urllib3, requests, orjson and black.

Worth knowing when upgrading

• If SSL_CERT_FILE or REQUESTS_CA_BUNDLE is set, it's now used instead of the bundled certifi certificates, so make sure it points to a complete CA bundle. A variable pointing to a missing file is ignored with a warning.
• WebSocket clients may log new WARNING lines on the WebSocketClient logger when the server reports a problem.

Thanks to @SachuJames, @Tyagiquamar, @jakobovski-arb, @romanzdk and @kevinchiu, whose PRs (#1034, #1033, #1026, #1008, #968) were combined into #1040.

All changes

• Add proxy, custom CA, and connection pool options by @justinpolygon in #1040
• Don't split comma-separated str values for *_any_of params by @justinpolygon in #1037
• Log WebSocket server errors instead of dropping them by @justinpolygon in #1039
• Add last_updated/timeframe to IndicesSnapshot and list_snapshot_indices by @justinpolygon in #1038
• Require Python 3.10+ and update dependencies with security fixes by @dependabot in #1023
• Bump idna from 3.7 to 3.15 by @dependabot in #1017
• [bot] Add 8-K disclosures and disclosure categories endpoints by @justinpolygon in #1025
• [PRO-1724] Add the skills plugin to the AI tools section of the README by @justinpolygon in #1036
• [PRO-2007] Add AGENTS.md and AI tools section to README by @justinpolygon in #1035
• [DEVREL-139] Update CODEOWNERS by @justinpolygon in #1024

Full Changelog: v2.8.0...v2.9.0