mirror of
https://github.com/manifoldbt/manifoldbt.git
synced 2026-11-02 07:56:11 +00:00
NautilusTrader 1.231.0, the latest stable release, asks for exactly fsspec 2026.2.0, inside the range of GHSA-27vj-qcqg-25rc (fixed in 2026.6.0). Every 1.229-1.231 release has the same exact pin, so no stable Nautilus accepts a patched fsspec. Both benchmarks now pin fsspec 2026.9.0 in requirements-lock.txt and install Nautilus from its own requirements-nautilus.txt with --no-deps, after the lock, which pins each of its runtime dependencies (uvloop was missing from the HFT lock and is now pinned). Checked on Linux, Python 3.12, fresh environments: pip check reports only the fsspec override, every engine imports, and a 10,000-bar run of the bar benchmark matches the published comparisons (exact on five workloads, documented on the bracket one).