fix(deps): update all non-major dependencies (!24) · Merge requests · Information Services / DevOps / Infrastructure / Terraform Modules / GCP PubSub To MS Teams

This MR contains the following updates:

Package	Change	Type	Update
certifi	`==2025.6.15` -> `==2025.10.5`		minor
charset-normalizer (changelog)	`==3.4.2` -> `==3.4.4`		patch
google-api-core	`==2.25.1` -> `==2.27.0`		minor
google-api-python-client	`==2.172.0` -> `==2.185.0`		minor
google-auth	`==2.40.3` -> `==2.41.1`		minor
googleapis-common-protos (source)	`==1.70.0` -> `==1.71.0`		minor
httplib2	`==0.22.0` -> `==0.31.0`		minor
idna (changelog)	`==3.10` -> `==3.11`		minor
protobuf	`==6.31.1` -> `==6.33.0`		minor
pyparsing	`==3.2.3` -> `==3.2.5`		patch
registry.gitlab.developers.cam.ac.uk/uis/devops/infra/dockerimages/logan-terraform	`1.12` -> `1.13`		minor
requests (source, changelog)	`==2.32.4` -> `==2.32.5`		patch
uis/devops/continuous-delivery/ci-templates	`v7.7.0` -> `v7.19.2`	repository	minor
urllib3 (changelog)	`==2.4.0` -> `==2.5.0`		minor

certifi/python-certifi (certifi)

jawah/charset_normalizer (charset-normalizer)

Bound setuptools to a specific constraint setuptools>=68,<=81.
Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

setuptools-scm as a build dependency.

Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
Support for Python 3.14

sdist archive contained useless directories.
automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

googleapis/python-api-core (google-api-core)

Support for async bidi streaming apis (#836) (9530548)

Add trove classifier for Python 3.14 (#842) (43690de)

Deprecate credentials_file argument (#841) (324eb74)
Fix async tests and round-off error in test expectations (#837) (14a5978)

googleapis/google-api-python-client (google-api-python-client)

analyticsadmin: Update the api b27bb76 (70dcfc9)
androidmanagement: Update the api 1dbe3b8 (70dcfc9)
apigee: Update the api 1f0d6b7 (70dcfc9)
beyondcorp: Update the api 10979e5 (70dcfc9)
bigqueryreservation: Update the api 0eede7c (70dcfc9)
bigquery: Update the api 367c996 (70dcfc9)
bigtableadmin: Update the api e913015 (70dcfc9)
compute: Update the api c95714c (70dcfc9)
contactcenterinsights: Update the api 5e6388d (70dcfc9)
container: Update the api a3da27a (70dcfc9)
datalineage: Update the api a8295f5 (70dcfc9)
dialogflow: Update the api 13cd2a7 (70dcfc9)
discoveryengine: Update the api 2c09202 (70dcfc9)
displayvideo: Update the api d975d8a (70dcfc9)
dlp: Update the api 6bbfa2e (70dcfc9)
eventarc: Update the api 7352f76 (70dcfc9)
firestore: Update the api d2f35e8 (70dcfc9)
iam: Update the api d1fc945 (70dcfc9)
integrations: Update the api b3a831c (70dcfc9)
managedkafka: Update the api 68eedb4 (70dcfc9)
metastore: Update the api e69debd (70dcfc9)
run: Update the api c45599e (70dcfc9)
secretmanager: Update the api 251eb52 (70dcfc9)
securityposture: Update the api 0300238 (70dcfc9)
testing: Update the api 73cabcc (70dcfc9)
travelimpactmodel: Update the api b63b5da (70dcfc9)
vmmigration: Update the api 4318af3 (70dcfc9)

googleapis/google-auth-library-python (google-auth)

Suppress deprecation warning for ADC (#1815) (751ce3f)

Add support for cachetools 6.0 (#1773) (af18060)
Add trust boundary support for service accounts and impersonation. (#1778) (99be2ce)

Deprecating load_credentials_from_dict (58b66ec)
Deprecating load_credentials_from_file (58b66ec)
Fix type error in credentials.py for python 3.7 and 3.8 (#1805) (c30a6a7)

Update user guide to include x509 feature. (#1802) (2d89ab4)

googleapis/google-cloud-python (googleapis-common-protos)

add support for Python 3.14 (#14699) (8b69540b)

httplib2/httplib2 (httplib2)

kjd/idna (idna)

psf/requests (requests)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

maven.gitab-ci.yml: added missing GKE_RUNNER_TAG on build_artifact (470fc86)

maven.gitlab-ci.yml: update publish to use CI_COMMIT_TAG for a release, or script for snapshot (e616bd4)

add poe-based test runner proof of concept (8e159c9)

python: remove Python 3.9 from default Python version list (6468459), closes #167

python-tox: increase Kubernetes memory limit for python-tox jobs (461ab04)

terraform: set kubernetes CPU requests for terraform jobs (5c75c2d)

exclude modules example sub-dirs from trivy scan (3adf47a)

yarn: bump k8s memory limit for yarn:pack jobs (739da6d), closes #158 #158

mandatory-jobs: reduce cpu and memory requests for SAST jobs (9d3526a)

pre-commit: certdir variable must be an empty string (d608c55)

mandatory-jobs: increase runner resources for failing SAST jobs (cfb7fd5)

🎸 Move standard job to Generic GKE Runner (59d2a0e)

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)

add custom configuration for secrets (ef86a30)

maven.gitlab-ci.yml: move services section under maven job (a2c5dca)

mark SAST jobs as needing no build artefacts (29054df), closes #150 #150

rename detect-non-utf8-files job and make it work with spaces in filenames (4d7ec69)

add detect-non-utf-files job (f629243)

terraform-pipeline: remove duplicate kics job (354c3cc)

trivy job now to use logan-terrafrom image and run terraform init in before_script (b03b3e4)

auto-devops: remove mandatory jobs from auto-devops template (5f7de9c)

mandatory-jobs: provide AST-related CI/CD variable defaults (3421a2e)

add mandatory jobs template (975f4aa)

urllib3/urllib3 (urllib3)

==================

Features

Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. (#3610 <https://github.com/urllib3/urllib3/issues/3610>__)
Added support for version 0.5 of hatch-vcs (#3612 <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
Made the Node.js runtime respect redirect parameters such as retries and redirects.
Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581 <https://github.com/urllib3/urllib3/issues/3581>__)
Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615 <https://github.com/urllib3/urllib3/issues/3615>__)

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Admin message

fix(deps): update all non-major dependencies

Release Notes

Changed

Removed

Misc

Changed

Added

Fixed

Misc

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Documentation

v1.71.0: googleapis-common-protos 1.71.0

Features

v7.19.2: 7.19.2

7.19.2 (2025-10-23)

Bug Fixes

v7.19.1: 7.19.1

7.19.1 (2025-10-23)

Bug Fixes

v7.19.0: 7.19.0

7.19.0 (2025-10-16)

Features

v7.18.0: 7.18.0

7.18.0 (2025-10-02)

Features

v7.17.7: 7.17.7

7.17.7 (2025-10-02)

Bug Fixes

v7.17.6: 7.17.6

7.17.6 (2025-10-01)

Bug Fixes

v7.17.5: 7.17.5

7.17.5 (2025-09-30)

Bug Fixes

v7.17.4: 7.17.4

7.17.4 (2025-09-29)

Bug Fixes

v7.17.3: 7.17.3

7.17.3 (2025-09-29)

v7.17.2: 7.17.2

7.17.2 (2025-09-25)

Bug Fixes

v7.17.1: 7.17.1

7.17.1 (2025-09-25)

Bug Fixes

v7.17.0: 7.17.0

7.17.0 (2025-09-24)

Features

v7.16.0: 7.16.0

7.16.0 (2025-09-19)

Features

v7.15.2: 7.15.2

7.15.2 (2025-09-17)

`v1.71.0`: googleapis-common-protos 1.71.0

`v7.19.2`: 7.19.2

`v7.19.1`: 7.19.1

`v7.19.0`: 7.19.0

`v7.18.0`: 7.18.0

`v7.17.7`: 7.17.7

`v7.17.6`: 7.17.6

`v7.17.5`: 7.17.5

`v7.17.4`: 7.17.4

`v7.17.3`: 7.17.3

`v7.17.2`: 7.17.2

`v7.17.1`: 7.17.1

`v7.17.0`: 7.17.0

`v7.16.0`: 7.16.0

`v7.15.2`: 7.15.2

`v7.15.1`: 7.15.1

`v7.15.0`: 7.15.0

`v7.14.1`: 7.14.1

`v7.14.0`: 7.14.0

`v7.13.1`: 7.13.1

`v7.13.0`: 7.13.0

`v7.12.0`: 7.12.0

`v7.11.1`: 7.11.1

`v7.11.0`: 7.11.0

`v7.10.4`: 7.10.4

`v7.10.3`: 7.10.3

`v7.10.2`: 7.10.2

`v7.10.1`: 7.10.1

`v7.10.0`: 7.10.0

`v7.9.1`: 7.9.1

`v7.9.0`: 7.9.0