FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

chore(deps): update dependency google-auth to v2.49.1 by renovate-bot · Pull Request #851 · googleapis/python-spanner-sqlalchemy · GitHub

This repository was archived by the owner on May 14, 2026. It is now read-only.
/ python-spanner-sqlalchemy Public archive

chore(deps): update dependency google-auth to v2.49.1 - #851

Closed
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/google-auth-2.x
ConversationCommits (1)ChecksFiles changed
Closed

chore(deps): update dependency google-auth to v2.49.1#851
renovate-bot wants to merge 1 commit into
googleapis:mainfrom
renovate-bot:renovate/google-auth-2.x

Conversation

renovate-bot commented Mar 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
google-auth ==2.41.1 → ==2.49.1

Release Notes

googleapis/google-auth-library-python (google-auth)

v2.48.0

Compare Source

Features
Bug Fixes

v2.47.0

Compare Source

Features
Bug Fixes

v2.46.0

Compare Source

Documentation
Features
Bug Fixes

v2.45.0

Compare Source

Features

v2.44.0

Compare Source

Features
Bug Fixes

v2.43.0

Compare Source

Features
  • Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#​1859) Add public wrapper for check_use_client_cert which enables mTLS if
    GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
    sources detected. Also, fix check_use_client_cert to return boolean
    value.
    Change #​1848 added the check_use_client_cert method that helps know if
    client cert should be used for mTLS connection. However, that was in a
    private class, thus, created a public wrapper of the same function so
    that it can be used by python Client Libraries. Also, updated
    check_use_client_cert to return a boolean value instead of existing
    string value for better readability and future scope.
    --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
  • Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#​1848) The Python SDK will use a hybrid approach for mTLS enablement:
  • If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set
    (either true or false), the SDK will respect that setting. This is
    necessary for test scenarios and users who need to explicitly control
    mTLS behavior.
  • If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not
    set, the SDK will automatically enable mTLS only if it detects Managed
    Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
    certificate sources. In other cases where the variable is not set, mTLS
    will remain disabled.
    ** This change also adds the helper method check_use_client_cert and
    it's unit test, which will be used for checking the criteria for setting
    the mTLS to true
    ** This change is only for Auth-Library, other changes will be created
    for Client-Library use-cases.
    --------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)

v2.42.1

Compare Source

Bug Fixes

v2.42.0

Compare Source

Features
Bug Fixes

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate-bot requested a review from a team as a code owner March 12, 2026 21:19
trusted-contributions-gcf Bot added the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Mar 12, 2026
product-auto-label Bot added the api: spanner Issues related to the googleapis/python-spanner-sqlalchemy API. label Mar 12, 2026

gemini-code-assist Bot commented Mar 12, 2026

Copy link
Copy Markdown

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request updates the google-auth Python dependency to its latest version, v2.49.1. This ensures the project benefits from the most recent features, bug fixes, and security enhancements provided by the Google authentication library, maintaining compatibility and improving overall stability.

Highlights

  • Dependency Update: The google-auth dependency has been updated from version 2.41.1 to 2.49.1.
  • New Features and Enhancements: This update incorporates several new features, including enhanced mTLS support, improved handling of workload certificates and external accounts, and support for Python 3.14.
  • Bug Fixes and Optimizations: Numerous bug fixes and optimizations have been applied, addressing issues like circular imports, deprecated functions, and improved error handling for impersonated credentials.
Changelog
  • google-auth
    • Introduced comprehensive support for mTLS (mutual TLS) across various authentication flows, including IAM domain, MDS connections, and Agentic Identities.
    • Added cryptography as a required dependency.
    • Enhanced GCE Metadata Server interactions with configurable retries and respect for the NO_GCE_CHECK environment variable.
    • Improved handling of workload certificates and external accounts, including a temporary patch for Cloud Run mis-configuration.
    • Added support for Python 3.14 and ecdsa p-384.
    • Implemented token revocation functionality in the STS client.
    • Resolved various bug fixes, such as circular imports, replacement of deprecated utcfromtimestamp, and correct auth detection when ADC environment variable is set but empty.
    • Optimized dependency management by dropping cachetools in favor of a simple local implementation.
Activity
  • This pull request was automatically generated by renovate-bot to update the google-auth dependency.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

yoshi-kokoro removed the kokoro:force-run Add this label to force Kokoro to re-run the tests. label Mar 12, 2026
gemini-code-assist Bot reviewed Mar 12, 2026
View reviewed changes

gemini-code-assist Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Code Review

This pull request updates the google-auth dependency. However, the update appears to have been done manually, leading to an inconsistent requirements.txt file. The new version of google-auth does not depend on cachetools, but cachetools is still present and attributed to google-auth. The requirements.txt file should be regenerated using pip-compile to ensure the dependency tree is correct.

Comment thread requirements.txt
Comment on lines +158 to +160
google-auth==2.49.1 \
--hash=sha256:16d40da1c3c5a0533f57d268fe72e0ebb0ae1cc3b567024122651c045d879b64 \
--hash=sha256:195ebe3dca18eddd1b3db5edc5189b76c13e96f29e73043b923ebcf3f1a860f7

gemini-code-assist Bot Mar 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

While updating google-auth is a good step, this change has been applied in a way that creates an inconsistency in your dependency file.

According to the release notes, google-auth version 2.47.0 and newer dropped the cachetools dependency.

However, requirements.txt still includes cachetools and incorrectly lists it as a dependency of google-auth (lines 17-20):

cachetools==7.0.2 \
    ...
    # via google-auth

This indicates that requirements.txt is now out of sync. Instead of manually changing the version, you should regenerate the file by running pip-compile --generate-hashes, as indicated in the file's header. This will ensure all transitive dependencies are correctly resolved.

ohmayr closed this Mar 13, 2026

forking-renovate Bot commented Mar 13, 2026

Copy link
Copy Markdown

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (==2.49.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

renovate-bot deleted the renovate/google-auth-2.x branch March 13, 2026 23:05
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

1 more reviewer
gemini-code-assist[bot] gemini-code-assist[bot] left review comments
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

api: spanner Issues related to the googleapis/python-spanner-sqlalchemy API.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

Back | FazBrowse Home | New Git URL