dependabot[bot]
e4d400e3f6
chore(deps): Bump github/codeql-action from 3 to 4 ( #12 )
...
Bumps [github/codeql-action](https://github.com/github/codeql-action ) from 3 to 4.
- [Release notes](https://github.com/github/codeql-action/releases )
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/github/codeql-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-18 09:09:31 +02:00
dependabot[bot]
69d8b5c871
chore(deps): Bump actions/deploy-pages from 4 to 5 ( #11 )
...
Bumps [actions/deploy-pages](https://github.com/actions/deploy-pages ) from 4 to 5.
- [Release notes](https://github.com/actions/deploy-pages/releases )
- [Commits](https://github.com/actions/deploy-pages/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/deploy-pages
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-18 09:09:29 +02:00
dependabot[bot]
743ff45976
chore(deps): Bump actions/cache from 4 to 5 ( #10 )
...
Bumps [actions/cache](https://github.com/actions/cache ) from 4 to 5.
- [Release notes](https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](https://github.com/actions/cache/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/cache
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-18 09:09:26 +02:00
dependabot[bot]
fef5a0610d
chore(deps): Bump codecov/codecov-action from 4 to 6 ( #9 )
...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action ) from 4 to 6.
- [Release notes](https://github.com/codecov/codecov-action/releases )
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: codecov/codecov-action
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-18 09:09:23 +02:00
dependabot[bot]
c468e9f00e
chore(deps): Bump actions/upload-artifact from 4 to 7 ( #8 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-18 09:09:20 +02:00
TPTBusiness
f1c2b7d3a9
ci(codacy): fix ESLint/PMD/pylint SARIF crash
...
Add .codacy.yml to disable ESLint (no .eslintrc in web/), PMD (no Java
code), and Prospector; restrict analysis paths to rdagent/ core.
Limit codacy workflow to bandit-only to avoid IndexOutOfBoundsException
at Sarif.scala:185 caused by 14k+ pylint results overwhelming the
SARIF formatter.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-18 08:40:46 +02:00
TPTBusiness
b8d9564fae
ci: add dependabot, conventional commits check, and scheduled weekly tests
...
- dependabot.yml: weekly auto-PRs for pip and github-actions deps
(major version bumps ignored, reviewed manually)
- conventional-commits.yml: blocks PRs with non-conforming titles;
warns on individual commits (required for release-please changelogs)
- scheduled-tests.yml: weekly pytest run on py3.10+3.11, plus
dependency vulnerability audit via safety
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-18 08:35:19 +02:00
TPTBusiness
ad0358d01c
fix(ci): remove CodeQL workflow (conflicts with default setup), drop duplicate lint job
...
- codeql.yml removed: GitHub default setup already runs CodeQL; advanced
config upload fails when default setup is enabled
- ci.yml lint job removed: duplicate of lint.yml, fails on pre-existing
violations unrelated to this PR
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-17 22:46:15 +02:00
TPTBusiness
cedd615922
fix(ci): set JAVA_TOOL_OPTIONS UTF-8 in Codacy workflow
...
Fixes MalformedInputException when Codacy SARIF formatter reads Python
files containing non-ASCII characters.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-17 22:38:15 +02:00
TPTBusiness
5860b8487d
ci: add CodeQL workflow, switch release to release-please, simplify CI
...
- ci.yml: lint + bandit (PyCQA/bandit-action) + pytest test/backtesting/
- release.yml: switch from manual tag-based to release-please auto-changelog
- codeql.yml: new weekly + on-push CodeQL Python analysis
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-17 22:37:22 +02:00
Trading Prediction Technology
64dc7ba425
Add Codacy security scan workflow
...
This workflow integrates Codacy security scans with GitHub Actions.
2026-04-17 22:07:29 +02:00
TPTBusiness
d8ab86d6cf
fix(security): replace relative_to() with realpath+startswith for CodeQL sanitization
...
Path injection (#22 , #28 , #29 , #30 ):
- Switch from Path.relative_to() to os.path.realpath() + str.startswith()
in all four path-validation sites across finetune and rl UI data_loader.py
and finetune app.py. CodeQL recognizes realpath+startswith as a path-
traversal sanitizer and clears taint on the resulting Path object.
- Also simplify finetune/app.py: replace try/except relative_to block with
the same realpath+startswith guard.
Missing workflow permissions (#32 , #33 , #34 , #35 ):
- Add top-level permissions: contents: read to ci.yml, docs.yml, lint.yml,
and security.yml. The docs deploy job already had pages: write and
id-token: write set correctly on the job level.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-17 21:59:03 +02:00
TPTBusiness
652164b79e
fix(ci): fix closed-source asset check false positives in security workflow
...
- Remove git_ignore_folder/RD-Agent_workspace symlink from tracking
(local symlink pointing to results/rd_agent_workspace, not for VCS)
- Rewrite closed-source check to use precise patterns:
- grep -F for exact prefix matching (no regex metacharacter issues)
- results/: allow README.md and .gitkeep, block everything else
- .env: match only .env and .env.* files, not paths containing "env"
(previously matched kaggle_environment.yaml, env.py, etc.)
- Add explicit check for committed data files (*.db, *.h5, *.parquet, *.log)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-16 07:47:24 +02:00
TPTBusiness
2cec08bc91
feat: add daily log rotation, llama health wait, factor auto-fixer, and README updates
...
- Add rdagent/log/daily_log.py: daily-rotating structured logs per command
(fin_quant, strategies, evaluate, parallel) with loguru; all.log combined sink
- predix.py: route TeeWriter output to logs/YYYY-MM-DD/ instead of root dir;
wrap quant() and evaluate() in daily_log.session() for start/stop/duration tracking
- rdagent/app/cli.py: fin_quant_cli waits for llama.cpp /health endpoint before
starting pipeline (up to 300 s); daily_log integration for fin_quant,
generate_strategies, eval_all, parallel commands
- scripts/predix_gen_strategies_real_bt.py: daily_log integration with
per-strategy ACCEPTED/REJECTED entries and summary on completion
- rdagent/components/coder/factor_coder/auto_fixer.py: new module that patches
common LLM-generated factor issues (min_periods, inf/NaN, groupby.transform,
MultiIndex corrections)
- rdagent/components/coder/factor_coder/prompts.yaml: add critical rules for
EURUSD 1-min intraday factors (min_periods, inf handling, groupby, date range)
- README.md: document --reasoning off and --n-gpu-layers 28 for llama-server;
explain VRAM constraints when Ollama is running alongside llama.cpp
- .bandit.yml: suppress B615 (HuggingFace unsafe download) for RL benchmark files
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-04-16 07:20:08 +02:00
TPTBusiness
b98c9cd572
feat: Add GitHub infrastructure, CI/CD pipelines, and examples
...
- Add GitHub issue templates (bug, feature, docs)
- Add pull request template with closed-source checklist
- Add CODEOWNERS for code review assignment
- Add CI/CD workflows (ci, lint, security, docs, release)
- pytest + coverage with Python 3.10/3.11 matrix
- Ruff + MyPy code quality checks
- Bandit + safety security scanning
- Sphinx docs + GitHub Pages deployment
- Automated PyPI releases on tag push
- Add 6 comprehensive examples + Jupyter quickstart
- 01_factor_discovery.py (LLM factor generation)
- 02_factor_evolution.py (factor optimization)
- 03_strategy_generation.py (IC-weighted combination)
- 04_backtest_simple.py (strategy backtesting)
- 05_model_training.py (XGBoost/LSTM training)
- 06_rl_trading_agent.py (PPO/DQN/A2C agents)
- notebooks/quickstart.ipynb (interactive tutorial)
- Restructure .gitignore with explicit closed-source sections
- Add CI/coverage/license badges to README
- Complete CLI docstrings for all 9 commands
- Add data_config.yaml for quant loop configuration
2026-04-11 21:40:18 +02:00
TPTBusiness
30c0a9166e
chore: initial Predix state (RD-Agent fork + EURUSD setup)
2026-03-22 21:20:02 +01:00
Linlang
c067ea6400
fix(ci): remove env-print step to avoid leaking sensitive environment variables ( #1299 )
2025-11-24 11:13:12 +08:00
Linlang
e42e4dae50
fix mypy check dependence error ( #885 )
2025-05-18 15:15:32 +08:00
XianBW
89deb019e9
chore: ui bug fix ( #884 )
...
* bug fix
* bug fix
* test ci
* bug fix
* ci fix
* ci fix
2025-05-18 11:08:41 +08:00
dependabot[bot]
c256e102aa
build(actions): bump actions/setup-node from 3 to 4 ( #425 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-06 13:17:50 +08:00
dependabot[bot]
f4d93bf9d6
build(actions): bump actions/checkout from 3 to 4 ( #426 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-10-15 12:19:35 +08:00
Linlang
638857cd55
fix: fix command injection ( #421 )
...
* fix command injection
* fix command injection
* fix command injection
* fix command injection
* fix command injection
* delete check repo
* fix command injection
* fix command injection
* add comments
* add comments
* add comments
* add comments
* delete chinese comments
* limit title length
2024-10-12 16:22:50 +08:00
Linlang
9dd35307a1
test: add test import ( #242 )
...
* add test import
* format with isort
* format with black
* merge main
* fix pytest error
* fix pytest error
* fix pytest error
* fix pytest error
* format with black
* fix pytest error
* fix pytest error
* fix pytest error
* fix pytest error
* fix pytest error
* format with isort
* Exclude entrance
* Add offline test
* auto-lint
* update coverage rate
---------
Co-authored-by: Young <afe.young@gmail.com >
2024-09-06 17:18:52 +08:00
Linlang
98f2dbd0ea
chore: release 0.0.1
...
Release-As: 0.0.1
2024-08-08 12:57:30 +08:00
Linlang
b1de1e9fdc
Release-As: 0.0.0 ( #179 )
2024-08-08 01:04:25 +08:00
Linlang
b2cf05a98c
fix: fix release CI ( #165 )
...
* test fix release CI
* test fix release CI
* test fix release CI
* test fix release CI
* test fix release CI
* test fix release CI
* test fix release CI
* test fix release CI
* remove bump2version from release CI
* change code
* split release CI
* format with toml-sort
* change triggers
* Update pyproject.toml
* optimize code
* fix sort-toml error
* merge release & upload
* fix release error
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
* test release ci
---------
Co-authored-by: you-n-g <you-n-g@users.noreply.github.com >
2024-08-08 00:14:15 +08:00
Linlang
62ab84e11e
add git push env ( #163 )
2024-08-05 17:47:29 +08:00
Linlang
06e1c705d2
fix: fix release CI error ( #160 )
...
* fix release CI error
* reset version
* fix error code
* change private_key path
* add pr title rules
* reset version
2024-08-05 17:34:03 +08:00
Linlang
7d279721b4
ci: change ci yml ( #146 )
...
* change ci yml
* add PULL_REQUEST_TEMPLATE
* change ci yml
* change ci yml
* Update .github/workflows/release.yml
* Update .github/workflows/release.yml
* Update .github/workflows/release.yml
---------
Co-authored-by: you-n-g <you-n-g@users.noreply.github.com >
2024-08-02 12:57:34 +08:00
Linlang
faa2fb03ad
CI checks that can be automatically repaired ( #119 )
...
* fix isort & black & toml-sort & sphinx error
* fix ci error
* fix ci error
* add comments
* Update Makefile
* change sphinx build command
* add auto-lint
* add black args
* format with black
* Auto Linting document
* fix ci error
---------
Co-authored-by: you-n-g <you-n-g@users.noreply.github.com >
Co-authored-by: Young <afe.young@gmail.com >
2024-07-26 12:12:16 +08:00
Linlang
571b5304cb
fix mypy error ( #91 )
...
* fix mypy error
* fix mypy error
* fix ruff error
* change command
* delete python 3.8&3.9 from CI
* change command
* Some modifications according to the comments
* Add literal type
* Update .github/workflows/ci.yml
* Some modifications according to the comments
* fix ruff error
* fix meta dict
* Fix type
* Some modifications according to the comments
* merge latest code
* Some modifications according to the comments
* Some modifications according to the comments
* fix ci error
* fix ruff error
* Update Makefile
* Update Makefile
---------
Co-authored-by: Ubuntu <debug@debug.qjtqi00gqezu1eqs55bqdrf51f.px.internal.cloudapp.net >
Co-authored-by: Young <afe.young@gmail.com >
Co-authored-by: you-n-g <you-n-g@users.noreply.github.com >
2024-07-25 15:20:04 +08:00
Linlang
947e52bacd
create_docs_framework ( #66 )
...
* Init from quick start
* optimize docs config
* add image
* optimize docs config
* complement file
* drop comments
* add ci
---------
Co-authored-by: Young <afe.young@gmail.com >
2024-07-15 20:17:12 +08:00
Xu Yang
a126c84c92
Refine all the implementation code to higher quality for release ( #29 )
...
* refine CI script
* refine all the code to higher quality
* refine the script to factor extraction and implementation
* add task loader interface
* add a task loader interface && move pdf analysis to pdf task loader
* change the name to global variables
---------
Co-authored-by: xuyang1 <xuyang1@microsoft.com >
2024-06-18 11:50:03 +08:00
Xu Yang
1e77557293
factor extraction pipeline ready ( #16 )
...
* run the code
* update code
* remove some redundant code
---------
Co-authored-by: xuyang1 <xuyang1@microsoft.com >
2024-06-05 15:36:15 +08:00
dependabot[bot]
230dca2bc2
build(actions): bump softprops/action-gh-release from 1 to 2 ( #5 )
...
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release ) from 1 to 2.
- [Release notes](https://github.com/softprops/action-gh-release/releases )
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md )
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2 )
---
updated-dependencies:
- dependency-name: softprops/action-gh-release
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-09 10:40:40 +08:00
Xu Yang
02173ffdcc
add code security check CI and dependbot ( #3 )
...
* update code
* init structure
* add requirements and fix CI
---------
Co-authored-by: xuyang1 <xuyang1@microsoft.com >
2024-05-09 10:35:54 +08:00