chore(deps): update all dependencies#16110
chore(deps): update all dependencies#16110renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
Conversation
trusted-contributions-gcf
bot
added
the
kokoro:force-run
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request performs a comprehensive update of the project's dependencies, ensuring that the codebase benefits from the latest features, performance improvements, and security patches. It encompasses updates to core Python libraries, Google Cloud client libraries, and GitHub Actions, with several major version upgrades that reflect significant advancements in the underlying packages. Highlights
Changelog
Ignored Files
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
yoshi-kokoro
removed
the
kokoro:force-run
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates numerous dependencies. I've found a few issues related to these updates. In packages/google-auth/docs/requirements-docs.txt, a comment regarding Sphinx 4.x support is now outdated due to the Sphinx upgrade. More critically, in packages/sqlalchemy-spanner/requirements.txt, the update to google-api-core to version 2.30.0 raises the minimum required Python version to 3.9, which could be a breaking change if Python 3.8 support is still intended. I also noted an outdated dependency comment for cachetools in the same file. Please review the detailed comments.
| google-api-core[grpc]==2.30.0 \ | ||
| --hash=sha256:02edfa9fab31e17fc0befb5f161b3bf93c9096d99aed584625f38065c511ad9b \ | ||
| --hash=sha256:80be49ee937ff9aba0fd79a6eddfde35fe658b9953ab9b79c57dd7061afa8df5 |
There was a problem hiding this comment.
The update of google-api-core to version 2.30.0 introduces a minimum Python version requirement of 3.9, as stated in its release notes. If sqlalchemy-spanner needs to maintain support for Python 3.8, this update is a breaking change and should be carefully reviewed.
| sphinxcontrib-applehelp==2.0.0 | ||
| sphinxcontrib-devhelp==2.0.0 | ||
| sphinxcontrib-htmlhelp==2.1.0 | ||
| sphinxcontrib-qthelp==2.0.0 | ||
| sphinxcontrib-serializinghtml==2.0.0 | ||
| sphinx==9.1.0 |
There was a problem hiding this comment.
The comment on lines 7-9 states that the pinned versions are to support Sphinx 4.x. With the update to Sphinx 9.1.0 in this pull request, this comment has become outdated. Please consider removing or updating it to avoid confusion.
| cachetools==7.0.5 \ | ||
| --hash=sha256:0cd042c24377200c1dcd225f8b7b12b0ca53cc2c961b43757e774ebe190fd990 \ | ||
| --hash=sha256:46bc8ebefbe485407621d0a4264b23c080cedd913921bad7ac3ed2f26c183114 |
There was a problem hiding this comment.
The comment on the next line (# via google-auth) is no longer accurate. google-auth removed its dependency on cachetools in version 2.47.0 (this PR updates it to 2.49.1). The comment should be updated to reflect the correct dependent package, or if cachetools is no longer required by any package, it should be removed from this file.
2 participants
This PR contains the following updates:
v4→v6v5→v6==1.17.0→==1.18.4==7.0.2→==7.0.5==3.4.4→==3.4.6==1.2.18→==1.3.1==2.26.0→==2.30.0==2.41.1→==2.49.1==2.48.0→==2.49.1==2.4.3→==2.5.0==3.58.0→==3.63.0==1.71.0→==1.73.0==1.75.1→==1.78.0==1.75.1→==1.78.0==9.10.0→==9.11.0==2.3.3→==3.0.1==0.6.1→==0.6.23.10→3.143.12→3.143.9→3.143.8→3.14==4.5.0→==9.1.0==1.0.4→==2.0.0==1.0.2→==2.0.0==2.0.1→==2.1.0==1.0.3→==2.0.0==1.1.5→==2.0.0==0.5.3→==0.5.5==2.5.0→==2.6.3==0.45.1→==0.46.3==1.17.3→==2.1.2Release Notes
actions/checkout (actions/checkout)
v6Compare Source
v5Compare Source
actions/setup-python (actions/setup-python)
v6Compare Source
jawah/charset_normalizer (charset-normalizer)
v3.4.6Compare Source
Changed
charset_normalizer.mdfor higher performance. Removedeligible(..)andfeed(...)in favor of
feed_info(...).UNICODE_RANGES_COMBINEDusing Unicode blocks v17.Fixed
--normalizewriting to wrong path when passing multiple files in. (#702)Misc
v3.4.5Compare Source
Changed
setuptoolsconstraint tosetuptools>=68,<=82.Fixed
Misc
query_yes_nofunction (inside CLI) to avoid using ambiguous licensed code.cd.pysubmodule into mypyc optional compilation to reduce further the performance impact.laurent-laporte-pro/deprecated (deprecated)
v1.3.1Compare Source
===================
Patch release: Packaging fix
Fixed
.tar.gz) that was not included in v1.3.0.v1.3.0Compare Source
===================
.. note::
Minor release: Parameters deprecation
Added
Add compatibility tests and adjustments for Wrapt v2.0. See PR #88 (musicinmybrain).
Add experimental
@deprecated_paramsdecorator to mark function parameters as deprecated at call-time; emits warnings when deprecated parameters are used with optional messages and configurable warning categories. See PR #93.Documentation
Changed
coveragetox environment to avoid collecting coverage across all test environments and reduce cross-environment coverage noise. See PR #92.googleapis/google-cloud-python (google-api-core)
v2.30.0: google-api-core: v2.30.0Bug Fixes
v2.29.0v2.28.1v2.28.0v2.27.0: google-cloud-texttospeech: v2.27.0Features
googleapis/google-auth-library-python (google-auth)
v2.48.0Compare Source
Features
NO_GCE_CHECKenvironment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)Bug Fixes
content-headerfrom AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)user_verification=preferredfor ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)v2.47.0Compare Source
Features
cachetoolsdependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)Bug Fixes
v2.46.0Compare Source
Documentation
Features
Bug Fixes
v2.45.0Compare Source
Features
v2.44.0Compare Source
Features
Bug Fixes
v2.43.0Compare Source
Features
GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
sources detected. Also, fix check_use_client_cert to return boolean
value.
Change #1848 added the check_use_client_cert method that helps know if
client cert should be used for mTLS connection. However, that was in a
private class, thus, created a public wrapper of the same function so
that it can be used by python Client Libraries. Also, updated
check_use_client_cert to return a boolean value instead of existing
string value for better readability and future scope.
--------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
(either true or false), the SDK will respect that setting. This is
necessary for test scenarios and users who need to explicitly control
mTLS behavior.
set, the SDK will automatically enable mTLS only if it detects Managed
Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
certificate sources. In other cases where the variable is not set, mTLS
will remain disabled.
** This change also adds the helper method
check_use_client_certandit's unit test, which will be used for checking the criteria for setting
the mTLS to true
** This change is only for Auth-Library, other changes will be created
for Client-Library use-cases.
--------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)
google-authto librarian (#1838) This PR onboardsgoogle-authlibrary to the Librarian system.Wait for
#1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)
v2.42.1Compare Source
Bug Fixes
v2.42.0Compare Source
Features
Bug Fixes
googleapis/python-cloud-core (google-cloud-core)
v2.5.0Compare Source
Features
Bug Fixes
googleapis/python-spanner (google-cloud-spanner)
v3.63.0Compare Source
Documentation
Features
Bug Fixes
v3.62.0Compare Source
Features
Bug Fixes
v3.61.0Compare Source
Features
v3.60.0Compare Source
Documentation
Features
Bug Fixes
v3.59.0Compare Source
Features
Bug Fixes
Documentation
grpc/grpc (grpcio)
v1.78.0Compare Source
This is release 1.78.0 (gutsy) of gRPC Core.
For gRPC documentation, see grpc.io. For previous releases, see Releases.
This release contains refinements, improvements, and bug fixes, with highlights listed below.
C++
Objective-C
Python
asyncio.run()to hang forever during the shutdown process. (#40989)Ruby
v1.76.0Compare Source
This is release 1.76.0 (genuine) of gRPC Core.
For gRPC documentation, see grpc.io. For previous releases, see Releases.
This release contains refinements, improvements, and bug fixes, with highlights listed below.
Core
C#
Python
ipython/ipython (ipython)
v9.11.0Compare Source
pandas-dev/pandas (pandas)
v3.0.1: pandas 3.0.1Compare Source
We are pleased to announce the release of pandas 3.0.1.
This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.
See the full whatsnew for a list of all the changes.
Pandas 3.0.0 supports Python 3.11 and higher.
The release can be installed from PyPI:
Or from conda-forge
Please report any issues with the release on the pandas issue tracker.
Thanks to all the contributors who made this release possible.
v3.0.0: pandas 3.0.0Compare Source
We are pleased to announce the release of pandas 3.0.0, a major release from the pandas 2.x series. This release includes some new features, bug fixes, and performance improvements, as well as possible breaking changes.
The pandas 3.0 release removed a functionality that was deprecated in previous releases. It is recommended to first upgrade to pandas 2.3 and to ensure your code is working without warnings, before upgrading to pandas 3.0.
Highlights include:
pd.colsyntaxSee the full whatsnew for a list of all the changes.
Pandas 3.0.0 supports Python 3.11 and higher.
The release can be installed from PyPI
Or from conda-forge
Please report any issues with the release on the pandas issue tracker.
Thanks to all the contributors who made this release possible.
pyasn1/pyasn1 (pyasn1)
v0.6.2Compare Source
in OID/RELATIVE-OID decoder (thanks to tsigouris007)
pr #97
issue #91
pr #92
pr #90
actions/python-versions (python)
v3.14.3: 3.14.3Compare Source
Python 3.14.3
v3.14.2: 3.14.2Compare Source
Python 3.14.2
v3.14.1: 3.14.1Compare Source
Python 3.14.1
v3.14.0: 3.14.0Compare Source
Python 3.14.0
v3.13.12: 3.13.12Compare Source
Python 3.13.12
v3.13.11: 3.13.11Compare Source
Python 3.13.11
v3.13.10: 3.13.10Compare Source
Python 3.13.10
v3.13.9: 3.13.9Compare Source
Python 3.13.9
v3.13.8: 3.13.8Compare Source
Python 3.13.8
v3.13.7: 3.13.7Compare Source
Python 3.13.7
v3.13.6: 3.13.6Compare Source
Python 3.13.6
v3.13.5: 3.13.5Compare Source
Python 3.13.5
v3.13.4: 3.13.4Compare Source
Python 3.13.4
v3.13.3: 3.13.3Compare Source
Python 3.13.3
v3.13.2: 3.13.2Compare Source
Python 3.13.2
v3.13.1: 3.13.1Compare Source
Python 3.13.1
v3.13.0: 3.13.0Compare Source
Python 3.13.0
v3.12.13: 3.12.13Compare Source
Python 3.12.13
v3.12.12: 3.12.12Compare Source
Python 3.12.12
v3.12.11: 3.12.11Compare Source
Python 3.12.11
v3.12.10: 3.12.10Compare Source
Python 3.12.10
v3.12.9: 3.12.9Compare Source
Python 3.12.9
v3.12.8: 3.12.8Compare Source
Python 3.12.8
v3.12.7: 3.12.7Compare Source
Python 3.12.7
v3.12.6: 3.12.6Compare Source
Python 3.12.6
v3.12.5: 3.12.5Compare Source
Python 3.12.5
v3.12.4: 3.12.4Compare Source
Python 3.12.4
v3.12.3: 3.12.3Compare Source
Python 3.12.3
v3.12.2: 3.12.2Compare Source
Python 3.12.2
v3.12.1: 3.12.1Compare Source
Python 3.12.1
v3.12.0: 3.12.0Compare Source
Python 3.12.0
v3.11.15: 3.11.15Compare Source
Python 3.11.15
v3.11.14: 3.11.14Compare Source
Python 3.11.14
v3.11.13: 3.11.13Compare Source
Python 3.11.13
v3.11.12: 3.11.12Compare Source
Python 3.11.12
v3.11.11: 3.11.11Compare Source
Python 3.11.11
v3.11.10: 3.11.10Compare Source
Python 3.11.10
v3.11.9: 3.11.9Compare Source
Python 3.11.9
[
v3.11.8](https://redirect.github.com/actions/python-versConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.