Update yfinance requirement from >=1.3 to >=1.5.2

[dependabot]

Updates the requirements on yfinance to permit the latest version.

Release notes

Sourced from yfinance's releases.

1.5.2

Fix yfinance breaking with curl_cffi>=0.16

Thanks @​dokson

Changelog

Sourced from yfinance's changelog.

1.5.2

Patches

• Fix yfinance breaking with curl_cffi>=0.16

1.5.1

Minor

• Fall back to chunked requests when single-URL fundamentals fetch times out #2811
• Replace valuation-measures HTML scrape with timeseries API #2851 Patches
• Determine login and subscription tier via the subscriptions API #2845
• Preserve user login cookies across cookie-strategy switches #2850
• Normalize configured proxy strings #2853
• Fix 404 Developer Guide link in CONTRIBUTING.md #2852
• Fix typo in CONTRIBUTING.md: "updates" -> "update" #2858
• Complementary info: guard against empty or malformed timeseries #2863
• Fix missing comma splitting two equity screener EPS fields #2867
• Fix _fetch_info handling of None responses #2869
• Complementary info: guard against empty or missing timeseries result #2877 Patches - price repair
• Fix price-repair unit-switch sometimes applying twice #2842
• Handle premarket silly games creating false-positive bad-dividend #2843
• Price repair: fix error triggered by NaN volume #2859
• Dividend repair: handle 'Adj Close' going to infinity #2860

1.4.1

Fix

• Preserve Date/Datetime index name in yf.download() output #2832

1.4.0

Features

• Add Auth class for Logging In #2761
• Allow region scoping for Sector and Industry (closes #2601) #2803
• Make curl_cffi optional with fallback to requests (closes #2692) #2802 Fixes
• Add 'repair' to get_history_metadata() #2777
• Adding try block for added protection to "meta" data #2778
• Fix: _dts_in_same_interval("1mo") ignored year #2780
• Fix TypeError when data['chart'] is None in history.py (#2670) #2794
• Fix dividends error on unlisted tickers #2797
• Fix #2784: validate Market region and stop returning misleading status #2801
• Make yf.download() reentrant by removing shared module globals #2805
• Allow lang and region scoping for Ticker (closes #2582) #2804
• Fix localized intraday download() always returning UTC #2825 Maintenance
• chore: fix typos (prividing -> providing, Reponse -> Response) #2779
• Fix Failing Tests #2792

... (truncated)

Commits

• beac22d Version 1.5.2
• e8f005e Merge pull request #2910 from dokson/fix/curl-cffi-cache-attr-detection
• e5f9079 Fix: don't treat curl_cffi>=0.16 sessions as caching (presence of .cache != a...
• 38c73ce Version 1.5.1
• 9eef6c1 Merge pull request #2862 from ranaroussi/dev
• 4fedcfd docs: changelog entry for 125b12e
• 80a768c docs: changelog entry for 15ba022
• 33cb3ab Merge branch 'main' into dev
• f10e765 docs: changelog entry for b375cd8
• b375cd8 Version 1.5.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[Ben05-sys]

Closing: the floors in requirements.txt are deliberately low so the terminal installs against the pandas/numpy someone already has, and the code uses nothing these releases added. Raising them would drop users on the older line to buy nothing. Dependabot's pip strategy is now increase-if-necessary (deaa526), so floors move only when the declared range genuinely cannot resolve — the exact pin in requirements-dev.txt still tracks upstream.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.