v8.7.3
Highlights
Documentation, deployment hardening, security and CLI scaffolding follow-up to v8.7.2.
Docs
- New
Getting Started/metrics.mdreference page covering both per-runBacktestMetricsand cross-windowBacktestSummaryMetrics, grouped by domain (returns, risk-adjusted, drawdown, per-trade, win/loss, exposure, multi-window robustness) Backtest.get_backtest_summary()getter added for symmetry with the other run/metrics getters- README feature bullets now deep-link to the relevant docs pages
application-setup.md: formatted folder tree, fixed notebook table, rewrote the example with the declarativegenerate_buy_signals/generate_sell_signalsAPIbacktest-reports.mdrewritten to recommendrecalculate_backtests_in_directory(memory-safe streaming) as the canonical entry point
Deprecations
recalculate_backtests(List[Backtest])is now deprecated (DeprecationWarning) and will be removed in a future major release. Holding many backtests in the parent process is memory-unsafe (eachBacktestcarries portfolio snapshots, trades and timeseries — thousands easily consume tens of GB before any work starts). Userecalculate_backtests_in_directory(src_dir, ...)instead, which streams from disk inside worker processes and keeps parent memory flat.
CLI
initnow scaffolds the recommended project layout (data/,backtest_results/,reports/,resources/, notebooks,.gitkeepmarkers)- All variant templates (
default,default-web,aws-lambda,azure-function) rewritten for the current declarativeTradingStrategyAPI - Azure variant correctly emits
function_app.py(Azure Functions Python v2 model) - Test suite aligned with the current generated layout (
strategies/my_strategy.py, rootdata_providers.py)
Azure Function deployment
deploy_to_azure_functionpolls for app readiness instead oftime.sleep(60)- Pushes app settings (
SCM_DO_BUILD_DURING_DEPLOYMENT,ENABLE_ORYX_BUILD) before publish - Adds
--build remote --pythontofunc azure functionapp publish(mandatory for native wheels on Linux Consumption) - Bumped runtime 3.10 → 3.11
- Fixed CORS process await bug; CORS errors downgraded to warnings
host.jsonno longer hides Request traces; explicitInformationlog level for the framework logger- Prints
az webapp log tailcommand at end
Security
- npm
overridesblock indocusaurus/package.jsonpinningserialize-javascript ^7.0.5andpostcss ^8.5.10 - Closes 3 open Dependabot alerts (1 high, 2 moderate)
npm auditreports 0 vulnerabilities
Full changelog: v8.7.2...v8.7.3