From b089ee0274c2f68ed0a5fcb2971cc7a6e3d8aa4e Mon Sep 17 00:00:00 2001
From: Thomas Kaul <4159106+dtslvr@users.noreply.github.com>
Date: Fri, 30 Oct 2026 15:19:21 +0100
Subject: [PATCH] Task/upgrade yahoo-finance2 to version 4.0.5 (#8336)

* Update yahoo-finance2 to version 4.0.5

* Update changelog
---
 CHANGELOG.md      |  1 +
 package-lock.json | 53 +++++++++++++++++++++++++++++++++++++++++------
 package.json      |  2 +-
 3 files changed, 49 insertions(+), 7 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index c8dcc7d81f..a7c1783fdc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -13,6 +13,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Deprecated the `api/v1/symbol` endpoints in favor of the `api/v1/symbols` endpoints
 - Upgraded `@internationalized/number` from version `3.6.8` to `3.6.9`
 - Upgraded `countries-and-timezones` from version `3.10.0` to `3.11.0`
+- Upgraded `yahoo-finance2` from version `4.0.2` to `4.0.5`
 
 ## 3.94.0 - 2026-10-28
 
diff --git a/package-lock.json b/package-lock.json
index 5e180a728e..d2db56749a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -106,7 +106,7 @@
         "twitter-api-v2": "1.29.1",
         "undici": "8.12.3",
         "uuid": "14.0.2",
-        "yahoo-finance2": "4.0.2",
+        "yahoo-finance2": "4.0.5",
         "zod": "4.6.7",
         "zone.js": "0.16.3"
       },
@@ -9058,6 +9058,7 @@
       "version": "1.30.0",
       "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.30.0.tgz",
       "integrity": "sha512-xKd8OIzlqNzcqcNumGAa6g+PW2kjD5vrpcKOnfldAUPP3j7lnqMPwlTXQm8gF+UwH72z0lqaRbjr9hqGz0eITA==",
+      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@hono/node-server": "^1.19.9 || ^2.0.5",
@@ -35825,18 +35826,18 @@
       }
     },
     "node_modules/yahoo-finance2": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/yahoo-finance2/-/yahoo-finance2-4.0.2.tgz",
-      "integrity": "sha512-wjNd6/l7dS7NrBPePbX8r2P/MkXK6bL86wW6Mqd34GuY3Kab2s80DkrYEchcOoS569Q0loQUztz3NeNxjd827A==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/yahoo-finance2/-/yahoo-finance2-4.0.5.tgz",
+      "integrity": "sha512-y+ZKQgbyWivjVoGNY5x7bf/CBYruZMb97qqOqz4NcKdDonoE6fH5ac5OCNzFRaXn2hop2Coi4H0imQZiI4P0uw==",
       "license": "MIT",
       "dependencies": {
         "@deno/shim-deno": "~0.18.0",
-        "@modelcontextprotocol/sdk": "npm:@modelcontextprotocol/sdk@^1.30.0",
+        "@modelcontextprotocol/sdk": "npm:@modelcontextprotocol/sdk@^1.32.0",
         "fetch-mock-cache": "npm:fetch-mock-cache@^3.1.0",
         "json-schema": "^0.4.0",
         "tough-cookie": "npm:tough-cookie@^6.0.2",
         "tough-cookie-file-store": "npm:tough-cookie-file-store@^3.3.0",
-        "zod": "npm:zod@^4.4.3"
+        "zod": "npm:zod@^4.6.5"
       },
       "bin": {
         "yahoo-finance": "esm/bin/yahoo-finance.js",
@@ -35847,6 +35848,46 @@
         "node": ">=22.0.0"
       }
     },
+    "node_modules/yahoo-finance2/node_modules/@modelcontextprotocol/sdk": {
+      "version": "1.32.2",
+      "resolved": "https://registry.npmjs.org/@modelcontextprotocol/sdk/-/sdk-1.32.2.tgz",
+      "integrity": "sha512-SWsVtH/0vULSQStoZ6xxH2K09Li8fXYTMC64ZeogCdpZ3XSi1eCPOByV1OpuJxuI3OcmHhosDWYyii07tpPsLw==",
+      "license": "MIT",
+      "dependencies": {
+        "@hono/node-server": "^1.19.9 || ^2.0.5",
+        "ajv": "^8.17.1",
+        "ajv-formats": "^3.0.1",
+        "content-type": "^1.0.5",
+        "cors": "^2.8.5",
+        "cross-spawn": "^7.0.5",
+        "eventsource": "^3.0.2",
+        "eventsource-parser": "^3.0.0",
+        "express": "^5.2.1",
+        "express-rate-limit": "^8.2.1",
+        "hono": "^4.11.4",
+        "jose": "^6.1.3",
+        "json-schema-typed": "^8.0.2",
+        "pkce-challenge": "^5.0.0",
+        "raw-body": "^3.0.0",
+        "zod": "^3.25 || ^4.0",
+        "zod-to-json-schema": "^3.25.1"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "peerDependencies": {
+        "@cfworker/json-schema": "^4.1.1",
+        "zod": "^3.25 || ^4.0"
+      },
+      "peerDependenciesMeta": {
+        "@cfworker/json-schema": {
+          "optional": true
+        },
+        "zod": {
+          "optional": false
+        }
+      }
+    },
     "node_modules/yallist": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
diff --git a/package.json b/package.json
index 4064155a5f..85acbb91f7 100644
--- a/package.json
+++ b/package.json
@@ -150,7 +150,7 @@
     "twitter-api-v2": "1.29.1",
     "undici": "8.12.3",
     "uuid": "14.0.2",
-    "yahoo-finance2": "4.0.2",
+    "yahoo-finance2": "4.0.5",
     "zod": "4.6.7",
     "zone.js": "0.16.3"
   },