chore(deps): update all dependencies#2420
chore(deps): update all dependencies#2420renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
Conversation
trusted-contributions-gcf
bot
added
the
kokoro:force-run
product-auto-label
bot
added
size: m
yoshi-kokoro
removed
the
kokoro:force-run
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request systematically updates all Python dependencies across various sample applications and test configurations. The primary goal is to ensure the project remains current with the latest stable versions of its libraries, enhancing security, stability, and leveraging new features and performance optimizations introduced in the updated packages. This comprehensive update addresses both major and minor version bumps for a wide range of direct and transitive dependencies. Highlights
Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This PR updates many dependencies, including several major version bumps (pandas, pyarrow, pycparser, pytest). I've left comments on these changes as they carry a risk of introducing breaking changes that could affect the samples. Major version updates often require manual code adjustments to ensure compatibility, which are not present in this PR. Please consider the potential impact before merging.
Note: Security Review has been skipped due to the limited scope of the PR.
| google-cloud-testutils==1.6.4 | ||
| pytest==8.4.2 | ||
| google-cloud-testutils==1.7.0 | ||
| pytest==9.0.2 |
There was a problem hiding this comment.
Updating pytest to version 9.0.2 is a major upgrade. Pytest 9.0 removed several features that were deprecated in version 8. If the tests for these samples rely on any of those removed features, they will fail. To prevent test failures, it would be safer to either update the tests to be compatible with Pytest 9, or to pin pytest to the latest 8.x version.
| proto-plus==1.26.1 | ||
| pyarrow==21.0.0 | ||
| packaging==26.0 | ||
| pandas==3.0.1 |
There was a problem hiding this comment.
Updating pandas to version 3.0.1 is a major upgrade that includes potentially breaking changes. For example, Pandas 3.0 changes some defaults and promotes PyArrow usage. Since this PR doesn't include any code changes to adapt to the new version, there's a risk of the sample code breaking for users. A safer approach would be to either add any necessary code adjustments for Pandas 3.0, or to restrict the update to the latest 2.x version for now.
| packaging==26.0 | ||
| pandas==3.0.1 | ||
| proto-plus==1.27.1 | ||
| pyarrow==23.0.1 |
There was a problem hiding this comment.
The update of pyarrow from version 21.0.0 to 23.0.1 spans multiple major versions and likely includes breaking changes. This could cause the sample to fail for users. Consider either adapting the code for pyarrow 23.0.1 or pinning to a less distant version to mitigate this risk.
| pyasn1-modules==0.4.2 | ||
| pycparser==2.23 | ||
| pyparsing==3.2.5 | ||
| pycparser==3.0 |
There was a problem hiding this comment.
The major version update of pycparser from 2.23 to 3.0 may be incompatible with cffi==2.0.0, which is not updated in this PR. This could cause runtime errors. A safer approach would be to update cffi to a version known to be compatible with pycparser 3.0, or to hold off on the pycparser major version upgrade.
3 participants
This PR contains the following updates:
==0.10.3→==0.12.1==0.10.3→==0.12.1==2025.10.5→==2026.2.25==3.4.3→==3.4.4==8.3.0→==8.3.1==1.4.3→==1.5.0==2.25.2→==2.30.0==2.41.1→==2.48.0==1.2.2→==1.3.0==3.38.0→==3.40.1==2.33.1→==2.36.2==2.4.3→==2.5.0==1.6.4→==1.7.0==1.7.1→==1.8.0==2.7.2→==2.8.0==3.38.0→==3.40.1==1.70.0→==1.72.0==1.75.1→==1.78.0==3.10→==3.11==9.6.0→==9.11.0==3.10.6→==3.10.8==25.0→==26.0==2.3.3→==3.0.1==1.26.1→==1.27.1==21.0.0→==23.0.1==2.23→==3.0==3.2.5→==3.3.2==8.4.2→==9.0.2==2025.2→==2026.1.post1Release Notes
googleapis/python-bigquery-magics (bigquery-magics)
v0.12.1Compare Source
Bug Fixes
v0.12.0Compare Source
Features
Bug Fixes
v0.11.0Compare Source
Features
certifi/python-certifi (certifi)
v2026.2.25Compare Source
v2026.1.4Compare Source
v2025.11.12Compare Source
jawah/charset_normalizer (charset-normalizer)
v3.4.4Compare Source
Changed
setuptoolsto a specific constraintsetuptools>=68,<=81.Removed
setuptools-scmas a build dependency.Misc
dev-requirements.txtand createdci-requirements.txtfor security purposes.multiple.intoto.jsonlin GitHub releases in addition to individual attestation file per wheel.pallets/click (click)
v8.3.1Compare Source
Released 2025-11-15
subprocess.Popen. :issue:3039:pr:
3055Sentinel.UNSETdefault values byNoneas they're passed throughthe
Context.invoke()method. :issue:3066:issue:3065:pr:3068Sentinel.UNSEThappening too early, which caused incorrectbehavior for multiple parameters using the same name. :issue:
3071:pr:3079Sentinel.UNSETvalues asNonewhen looking up for other parametersthrough the context inside parameter callbacks. :issue:
3136:pr:3137promptandconfirmparameterprompt_suffixisempty. :issue:
3019:pr:3021Sentinel.UNSETis found during parsing, it will skip calls totype_cast_value. :issue:3069:pr:3090googleapis/python-db-dtypes-pandas (db-dtypes)
v1.5.0Compare Source
Features
v1.4.4Compare Source
Dependencies
googleapis/google-cloud-python (google-api-core)
v2.30.0: google-api-core: v2.30.0Bug Fixes
v2.29.0v2.28.1v2.28.0v2.27.0: google-cloud-texttospeech: v2.27.0Features
v2.26.0: google-cloud-secret-manager 2.26.0Features
check Python and dependency versions in generated GAPICs (PiperOrigin-RevId:
8454486) (d2b35b25)auto-enable mTLS when supported certificates are detected (PiperOrigin-RevId:
8454486) (d2b35b25)googleapis/google-auth-library-python (google-auth)
v2.48.0Compare Source
Features
NO_GCE_CHECKenvironment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)Bug Fixes
content-headerfrom AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)user_verification=preferredfor ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)v2.47.0Compare Source
Features
cachetoolsdependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)Bug Fixes
v2.46.0Compare Source
Documentation
Features
Bug Fixes
v2.45.0Compare Source
Features
v2.44.0Compare Source
Features
Bug Fixes
v2.43.0Compare Source
Features
GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
sources detected. Also, fix check_use_client_cert to return boolean
value.
Change #1848 added the check_use_client_cert method that helps know if
client cert should be used for mTLS connection. However, that was in a
private class, thus, created a public wrapper of the same function so
that it can be used by python Client Libraries. Also, updated
check_use_client_cert to return a boolean value instead of existing
string value for better readability and future scope.
--------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
(either true or false), the SDK will respect that setting. This is
necessary for test scenarios and users who need to explicitly control
mTLS behavior.
set, the SDK will automatically enable mTLS only if it detects Managed
Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
certificate sources. In other cases where the variable is not set, mTLS
will remain disabled.
** This change also adds the helper method
check_use_client_certandit's unit test, which will be used for checking the criteria for setting
the mTLS to true
** This change is only for Auth-Library, other changes will be created
for Client-Library use-cases.
--------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)
google-authto librarian (#1838) This PR onboardsgoogle-authlibrary to the Librarian system.Wait for
#1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)
v2.42.1Compare Source
Bug Fixes
v2.42.0Compare Source
Features
Bug Fixes
googleapis/python-bigquery (google-cloud-bigquery)
v3.40.1Compare Source
Documentation
Bug Fixes
v3.40.0Compare Source
Features
v3.39.0Compare Source
Documentation
Features
Bug Fixes
io.Basein thePathType(#2323) (b11e09cb6ee32e451b37eda66bece2220b9ceaba)retryinjob.result()(#2302) (e118b029bbc89a5adbab83f39858c356c23665bf)googleapis/python-cloud-core (google-cloud-core)
v2.5.0Compare Source
Features
Bug Fixes
googleapis/python-test-utils (google-cloud-testutils)
v1.7.0Compare Source
Features
googleapis/python-crc32c (google-crc32c)
v1.8.0Compare Source
Features
Bug Fixes
googleapis/google-resumable-media-python (google-resumable-media)
v2.8.0Compare Source
Features
Bug Fixes
grpc/grpc (grpcio)
v1.78.0Compare Source
This is release 1.78.0 (gutsy) of gRPC Core.
For gRPC documentation, see grpc.io. For previous releases, see Releases.
This release contains refinements, improvements, and bug fixes, with highlights listed below.
C++
Objective-C
Python
asyncio.run()to hang forever during the shutdown process. (#40989)Ruby
v1.76.0Compare Source
This is release 1.76.0 (genuine) of gRPC Core.
For gRPC documentation, see grpc.io. For previous releases, see Releases.
This release contains refinements, improvements, and bug fixes, with highlights listed below.
Core
C#
Python
kjd/idna (idna)
v3.11Compare Source
ipython/ipython (ipython)
v9.11.0Compare Source
v9.10.0Compare Source
v9.9.0Compare Source
v9.8.0Compare Source
v9.7.0Compare Source
matplotlib/matplotlib (matplotlib)
v3.10.8: REL: v3.10.8Compare Source
This is a bugfix release in the 3.10.x series.
The primary highlights of this release are:
v3.10.7: REL: v3.10.7Compare Source
This is the latest bugfix release in the 3.10.x series.
The most important update in this release is that the minimum version
of
pyparsinghas been updated to version 3.0.pypa/packaging (packaging)
v26.0Compare Source
Read about the performance improvements here: https://iscinumpy.dev/post/packaging-faster.
What's Changed
Features:
__replace__forVersionby @henryiii in #1003VersionandSpecifierby @henryiii in #1004Behavior adaptations:
Specifier.contains,SpecifierSet.contains, andSpecifierSet.filterby @notatallshaw in #897SpecifierSet.filterby @notatallshaw in #942SpecifierSetby @notatallshaw in #951Falseinstead of raising for.containswith invalid version by @Liam-DeVoe in #932SpecifierandSpecifierSet'sfilterandcontainsmethod. by @notatallshaw in #954Versionon certain marker keys, returnFalseon unequal ordered comparsions by @JP-Ellis in #939Fixes:
_hashwhen unpicklingTag()by @dholth in #860Specifier.prereleasesby @notatallshaw in #896_GLibCVersionNamedTuplein_manylinuxby @cthoyt in #868()by @bwoodsend in #879'name'format by @di in #925Requirementsstring by @henryiii in #953packaginglogger instead by @henryiii in #965MarkerandRequirementby @henryiii in #1022Markerfails to construct by @henryiii in #1033Performance:
_manylinux.pyby @cthoyt in #869Versionby @bearomorphism in #913Versions in specifier comparison by @notatallshaw in #986Specifier's Version by @notatallshaw in #985Versiona little faster by @henryiii in #987Versionregex cleanup by @henryiii in #990_keyinVersionby @notatallshaw in #989 and regression forpackaging_legacyfixed by @henryiii in #1048canonicalize_versionby @henryiii in #993fullmatchin a couple more places by @henryiii in #992fullmatchfor markers too by @henryiii in #1029mapinstead of generator by @henryiii in #996._version(_Version, aNamedTuple) by @henryiii in #995 and #1062Versioncreation incanonicalize_versionby @henryiii in #994__slots__toVersionby @henryiii in #1001__slots__toSpecifiers by @henryiii in #1002__slots__toNodes by @henryiii in #1032version.__replace__in specifier comparison by @notatallshaw in #999_get_spec_versionin more places inSpecifierby @notatallshaw in #1005setconstruction out of function by @henryiii in #1012Version.__str__by about 10% by @henryiii in #997canonicalize_nameby avoiding a regex by @henryiii in #1030, #1047, and #1064Type annotations:
parse_wheel_filenamedocs by @ncoghlan in #973_versionin.version.Versionby @brettcannon in #927specifier.pyby @subhajitsaha01 in #930Internal:
license-filesby @DimitriPapadopoulos in #924Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.