fix(deps): update all non-major dependencies (!14) · Merge requests · Information Services / DevOps / Infrastructure / Terraform Modules / GCP Notification to GitLab Issue

This MR contains the following updates:

Package	Change	Type	Update
certifi	`==2025.6.15` -> `==2025.8.3`		minor
charset-normalizer (changelog)	`==3.4.2` -> `==3.4.3`		patch
google-api-python-client	`==2.172.0` -> `==2.183.0`		minor
grpcio (source)	`==1.73.0` -> `==1.75.1`		minor
grpcio-status	`==1.73.0` -> `==1.75.1`		minor
httplib2	`==0.22.0` -> `==0.31.0`		minor
protobuf	`==6.31.1` -> `==6.32.1`		minor
pyparsing	`==3.2.3` -> `==3.2.5`		patch
registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/logan-terraform	`1.12` -> `1.13`		minor
requests (source, changelog)	`==2.32.4` -> `==2.32.5`		patch
uis/devops/continuous-delivery/ci-templates	`v7.7.0` -> `v7.17.4`	repository	minor
urllib3 (changelog)	`==2.4.0` -> `==2.5.0`		minor

certifi/python-certifi (certifi)

jawah/charset_normalizer (charset-normalizer)

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
Support for Python 3.14

sdist archive contained useless directories.
automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

googleapis/google-api-python-client (google-api-python-client)

analyticsadmin: Update the api b27bb76 (70dcfc9)
androidmanagement: Update the api 1dbe3b8 (70dcfc9)
apigee: Update the api 1f0d6b7 (70dcfc9)
beyondcorp: Update the api 10979e5 (70dcfc9)
bigqueryreservation: Update the api 0eede7c (70dcfc9)
bigquery: Update the api 367c996 (70dcfc9)
bigtableadmin: Update the api e913015 (70dcfc9)
compute: Update the api c95714c (70dcfc9)
contactcenterinsights: Update the api 5e6388d (70dcfc9)
container: Update the api a3da27a (70dcfc9)
datalineage: Update the api a8295f5 (70dcfc9)
dialogflow: Update the api 13cd2a7 (70dcfc9)
discoveryengine: Update the api 2c09202 (70dcfc9)
displayvideo: Update the api d975d8a (70dcfc9)
dlp: Update the api 6bbfa2e (70dcfc9)
eventarc: Update the api 7352f76 (70dcfc9)
firestore: Update the api d2f35e8 (70dcfc9)
iam: Update the api d1fc945 (70dcfc9)
integrations: Update the api b3a831c (70dcfc9)
managedkafka: Update the api 68eedb4 (70dcfc9)
metastore: Update the api e69debd (70dcfc9)
run: Update the api c45599e (70dcfc9)
secretmanager: Update the api 251eb52 (70dcfc9)
securityposture: Update the api 0300238 (70dcfc9)
testing: Update the api 73cabcc (70dcfc9)
travelimpactmodel: Update the api b63b5da (70dcfc9)
vmmigration: Update the api 4318af3 (70dcfc9)

grpc/grpc (grpcio)

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Release grpcio wheels with Python 3.14 support (#40403)
Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#40447)
- This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #36655, #38679, #33342
Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#40750)
- Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

This is release 1.75.0 (gemini) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[Security] Cherry Pick Spiffe Verification. (#40515)
[Python][Typeguard] Part 3 - Add Typeguard to AIO stack in tests. (#40217)
[c-ares] update version to 1.34.5. (#39508)
[pick_first] fix bug that caused us to stop attempting to connect. (#40162)

C++

[OTel C++] Implement retry metrics. (#39195)

Objective-C

Fix data race by adding custom getter for state property with @synchronized locking. (#40146)

Python

gRPC Python (grpcio) now depends on typing-extensions~=4.13. (#40137)
Update musllinux wheels from musllinux_1_1 to musllinux_1_2. (#40317)
- Dropping musllinux_1_1 because it reached EOL in November 2024
- Reference on musllinux platform tags: PEP 656
grpc.aio typehint fixes. (#40215, #40217)
- Fixes type hints for grpc.aio._utils, grpc.aio._call, grpc.aio._interceptor and grpc.aio._utils
- Fixing the error in public API: ClientCallDetails.method was declared as str but always called with bytes, see InterceptedUnaryUnaryCall.
Fixes issue #40325 with grpcio failing to install on all non-Mac Apple devices internal builds. (#40347)

Ruby

Ruby: Mark credential object in channel. (#40394)
[Ruby] Add rubygems support for linux-gnu and linux-musl platforms. (#39549)

This is release 1.74.0 (gee) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[OTel C++, Posix EE] Plumb TCP write timestamps and metrics to OTel tracers. (#39946)
[event_engine] Implement fork support in Posix Event Engine. (#38980)
[http2] Fix GRPC_ARG_HTTP2_STREAM_LOOKAHEAD_BYTES for when BDP is disabled. (#39585)

Objective-C

[dep] Upgrade Protobuf Version 31.1. (#39916)

PHP

[PHP] Fully qualify stdClass with global namespace. (#39996)
[php] Fix PHPDoc so that UnaryCall defines the proper return type. (#37563)
fix typing of nullable parameters. (#39199)

Python

[EventEngine] Fix the issue with gRPC Python Client not reconnecting in certain situations: #38290, #39113, #39631. (#39894)
Fix gRPC Python docs website layout - use spaces optimally. (#40073)

Ruby

[Ruby] Add rubygems support for linux-gnu and linux-musl platforms . (#40174)
[ruby] enable EE fork support. (#39786)
[ruby] Return nil for c functions expected to return a VALUE. (#39214)
[ruby] remove connectivity state watch thread, fix cancellations from spurious signals. (#39409)
[ruby] Drop Ruby 3.0 support. (#39607)

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

[Backport of #39894 to v1.73.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #38290, #39113, #39631 (#39950).

httplib2/httplib2 (httplib2)

psf/requests (requests)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

pre-commit: certdir variable must be an empty string (d608c55)

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

🎸 Move standard job to Generic GKE Runner (59d2a0e)

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)

add custom configuration for secrets (ef86a30)

maven.gitlab-ci.yml: move services section under maven job (a2c5dca)

mark SAST jobs as needing no build artefacts (29054df), closes #150 #150

rename detect-non-utf8-files job and make it work with spaces in filenames (4d7ec69)

add detect-non-utf-files job (f629243)

terraform-pipeline: remove duplicate kics job (354c3cc)

trivy job now to use logan-terrafrom image and run terraform init in before_script (b03b3e4)

auto-devops: remove mandatory jobs from auto-devops template (5f7de9c)

mandatory-jobs: provide AST-related CI/CD variable defaults (3421a2e)

add mandatory jobs template (975f4aa)

urllib3/urllib3 (urllib3)

==================

Features

Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. (#3610 <https://github.com/urllib3/urllib3/issues/3610>__)
Added support for version 0.5 of hatch-vcs (#3612 <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
Made the Node.js runtime respect redirect parameters such as retries and redirects.
Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581 <https://github.com/urllib3/urllib3/issues/3581>__)
Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615 <https://github.com/urllib3/urllib3/issues/3615>__)

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Admin message

fix(deps): update all non-major dependencies

Release Notes

Changed

Added

Fixed

Misc

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

What's Changed

Python

Core

C++

Objective-C

Python

Ruby

Core

Objective-C

PHP

Python

Ruby

Python

v7.17.4: 7.17.4

7.17.4 (2025-09-29)

Bug Fixes

v7.17.3: 7.17.3

7.17.3 (2025-09-29)

v7.17.2: 7.17.2

7.17.2 (2025-09-25)

Bug Fixes

v7.17.1: 7.17.1

7.17.1 (2025-09-25)

Bug Fixes

v7.17.0: 7.17.0

7.17.0 (2025-09-24)

Features

v7.16.0: 7.16.0

7.16.0 (2025-09-19)

Features

v7.15.2: 7.15.2

7.15.2 (2025-09-17)

v7.15.1: 7.15.1

7.15.1 (2025-09-11)

Bug Fixes

v7.15.0: 7.15.0

7.15.0 (2025-09-08)

Features

v7.14.1: 7.14.1

7.14.1 (2025-09-04)

Bug Fixes

v7.14.0: 7.14.0

7.14.0 (2025-09-02)

Features

v7.13.1: 7.13.1

7.13.1 (2025-09-01)

Bug Fixes

v7.13.0: 7.13.0

7.13.0 (2025-08-27)

Features

v7.12.0: 7.12.0

7.12.0 (2025-08-27)

Features

v7.11.1: 7.11.1

7.11.1 (2025-08-21)

v7.11.0: 7.11.0

`v7.17.4`: 7.17.4

`v7.17.3`: 7.17.3

`v7.17.2`: 7.17.2

`v7.17.1`: 7.17.1

`v7.17.0`: 7.17.0

`v7.16.0`: 7.16.0

`v7.15.2`: 7.15.2

`v7.15.1`: 7.15.1

`v7.15.0`: 7.15.0

`v7.14.1`: 7.14.1

`v7.14.0`: 7.14.0

`v7.13.1`: 7.13.1

`v7.13.0`: 7.13.0

`v7.12.0`: 7.12.0

`v7.11.1`: 7.11.1

`v7.11.0`: 7.11.0

`v7.10.4`: 7.10.4

`v7.10.3`: 7.10.3

`v7.10.2`: 7.10.2

`v7.10.1`: 7.10.1

`v7.10.0`: 7.10.0

`v7.9.1`: 7.9.1

`v7.9.0`: 7.9.0

`v7.8.0`: 7.8.0