fix(deps): update all non-major dependencies (!24) · Merge requests · Information Services / DevOps / Infrastructure / Terraform Modules / GCP PubSub To MS Teams

This MR contains the following updates:

Package	Change	Type	Update
certifi	`==2025.6.15` -> `==2025.10.5`		minor
charset-normalizer (changelog)	`==3.4.2` -> `==3.4.4`		patch
google-api-core	`==2.25.1` -> `==2.28.1`		minor
google-api-python-client	`==2.172.0` -> `==2.187.0`		minor
google-auth	`==2.40.3` -> `==2.43.0`		minor
google-auth-httplib2	`==0.2.0` -> `==0.2.1`		patch
googleapis-common-protos (source)	`==1.70.0` -> `==1.72.0`		minor
httplib2	`==0.22.0` -> `==0.31.0`		minor
idna (changelog)	`==3.10` -> `==3.11`		minor
protobuf	`==6.31.1` -> `==6.33.0`		minor
pyparsing	`==3.2.3` -> `==3.2.5`		patch
requests (source, changelog)	`==2.32.4` -> `==2.32.5`		patch
uis/devops/continuous-delivery/ci-templates	`v7.19.2` -> `v7.20.3`	repository	minor
urllib3 (changelog)	`==2.4.0` -> `==2.5.0`		minor

certifi/python-certifi (certifi)

jawah/charset_normalizer (charset-normalizer)

Bound setuptools to a specific constraint setuptools>=68,<=81.
Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

setuptools-scm as a build dependency.

Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
Support for Python 3.14

sdist archive contained useless directories.
automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

googleapis/python-api-core (google-api-core)

Remove dependency on packaging and pkg_resources (#852) (ca59a86)

Provide and use Python version support check (#832) (d36e896)

Support for async bidi streaming apis (#836) (9530548)

Add trove classifier for Python 3.14 (#842) (43690de)

Deprecate credentials_file argument (#841) (324eb74)
Fix async tests and round-off error in test expectations (#837) (14a5978)

googleapis/google-api-python-client (google-api-python-client)

analyticsadmin: Update the api b27bb76 (70dcfc9)
androidmanagement: Update the api 1dbe3b8 (70dcfc9)
apigee: Update the api 1f0d6b7 (70dcfc9)
beyondcorp: Update the api 10979e5 (70dcfc9)
bigqueryreservation: Update the api 0eede7c (70dcfc9)
bigquery: Update the api 367c996 (70dcfc9)
bigtableadmin: Update the api e913015 (70dcfc9)
compute: Update the api c95714c (70dcfc9)
contactcenterinsights: Update the api 5e6388d (70dcfc9)
container: Update the api a3da27a (70dcfc9)
datalineage: Update the api a8295f5 (70dcfc9)
dialogflow: Update the api 13cd2a7 (70dcfc9)
discoveryengine: Update the api 2c09202 (70dcfc9)
displayvideo: Update the api d975d8a (70dcfc9)
dlp: Update the api 6bbfa2e (70dcfc9)
eventarc: Update the api 7352f76 (70dcfc9)
firestore: Update the api d2f35e8 (70dcfc9)
iam: Update the api d1fc945 (70dcfc9)
integrations: Update the api b3a831c (70dcfc9)
managedkafka: Update the api 68eedb4 (70dcfc9)
metastore: Update the api e69debd (70dcfc9)
run: Update the api c45599e (70dcfc9)
secretmanager: Update the api 251eb52 (70dcfc9)
securityposture: Update the api 0300238 (70dcfc9)
testing: Update the api 73cabcc (70dcfc9)
travelimpactmodel: Update the api b63b5da (70dcfc9)
vmmigration: Update the api 4318af3 (70dcfc9)

googleapis/google-auth-library-python (google-auth)

Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) Add public wrapper for check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected. Also, fix check_use_client_cert to return boolean value. Change #1848 added the check_use_client_cert method that helps know if client cert should be used for mTLS connection. However, that was in a private class, thus, created a public wrapper of the same function so that it can be used by python Client Libraries. Also, updated check_use_client_cert to return a boolean value instead of existing string value for better readability and future scope. --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) The Python SDK will use a hybrid approach for mTLS enablement:

If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set (either true or false), the SDK will respect that setting. This is necessary for test scenarios and users who need to explicitly control mTLS behavior.
If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not set, the SDK will automatically enable mTLS only if it detects Managed Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF) certificate sources. In other cases where the variable is not set, mTLS will remain disabled. ** This change also adds the helper method check_use_client_cert and it's unit test, which will be used for checking the criteria for setting the mTLS to true ** This change is only for Auth-Library, other changes will be created for Client-Library use-cases. --------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)

onboard google-auth to librarian (#1838) This MR onboards google-auth library to the Librarian system. Wait for #1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)

Catch ValueError for json.loads() (#1842) (b074cad)

Add trust boundary support for external accounts. (#1809) (36ecb1d)

Read scopes from ADC json for impersoanted cred (#1820) (62c0fc8)

Suppress deprecation warning for ADC (#1815) (751ce3f)

Add support for cachetools 6.0 (#1773) (af18060)
Add trust boundary support for service accounts and impersonation. (#1778) (99be2ce)

Deprecating load_credentials_from_dict (58b66ec)
Deprecating load_credentials_from_file (58b66ec)
Fix type error in credentials.py for python 3.7 and 3.8 (#1805) (c30a6a7)

Update user guide to include x509 feature. (#1802) (2d89ab4)

GoogleCloudPlatform/google-auth-library-python-httplib2 (google-auth-httplib2)

deps: Require google-auth >= 1.32.0,<3.0.0 (a69b725)
deps: Require httplib2 >= 0.19.0,<1.0.0 (a69b725)
Drop python 3.6; require python 3.7+ (a69b725)
Remove setup.cfg configuration for creating universal wheels (#191) (c2be0ae)

googleapis/google-cloud-python (googleapis-common-protos)

add common_resources.proto (#14851) (e4e0e2a9)
add field api_version to message ServiceForTransport (#14843) (81812fde)

add support for Python 3.14 (#14699) (8b69540b)

httplib2/httplib2 (httplib2)

kjd/idna (idna)

psf/requests (requests)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

use only needed bits of Terraform-Module.gitlab-ci.yml to avoid duplicate jobs (ff646a0)

check-latest-tag-in-changelog: skip job if tag is an alpha or beta release (210ffd5)

allow no test coverage in maven (40db7bf)

add code coverage to maven jobs (53c1345)

urllib3/urllib3 (urllib3)

==================

Features

Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. (#3610 <https://github.com/urllib3/urllib3/issues/3610>__)
Added support for version 0.5 of hatch-vcs (#3612 <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
Made the Node.js runtime respect redirect parameters such as retries and redirects.
Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581 <https://github.com/urllib3/urllib3/issues/3581>__)
Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615 <https://github.com/urllib3/urllib3/issues/3615>__)

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

fix(deps): update all non-major dependencies

Release Notes

Changed

Removed

Misc

Changed

Added

Fixed

Misc

Bug Fixes

Features

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Documentation

Bug Fixes

v1.72.0: googleapis-common-protos 1.72.0

Features

v1.71.0: googleapis-common-protos 1.71.0

Features

v7.20.3: 7.20.3

7.20.3 (2025-11-03)

Bug Fixes

v7.20.2: 7.20.2

7.20.2 (2025-10-30)

Bug Fixes

v7.20.1: 7.20.1

7.20.1 (2025-10-29)

Bug Fixes

v7.20.0: 7.20.0

7.20.0 (2025-10-28)

Features

Features

Bugfixes

Configuration

Merge request reports

`v1.72.0`: googleapis-common-protos 1.72.0

`v1.71.0`: googleapis-common-protos 1.71.0

`v7.20.3`: 7.20.3

`v7.20.2`: 7.20.2

`v7.20.1`: 7.20.1

`v7.20.0`: 7.20.0