Bump the dependencies group across 1 directory with 19 updates #555

dependabot · 2025-12-01T10:35:17Z

Bumps the dependencies group with 19 updates in the / directory:

Package	From	To
django	`5.2.7`	`5.2.8`
celery	`5.5.3`	`5.6.0`
django-structlog[celery]	`9.1.1`	`10.0.0`
boto3	`1.40.52`	`1.42.0`
sentry-sdk	`2.42.0`	`2.46.0`
google-api-python-client	`2.184.0`	`2.187.0`
google-auth	`2.41.1`	`2.43.0`
google-auth-httplib2	`0.2.0`	`0.2.1`
google-auth-oauthlib	`1.2.2`	`1.2.3`
pytest	`8.4.2`	`9.0.1`
faker	`37.11.0`	`38.2.0`
ipython	`9.6.0`	`9.7.0`
django-debug-toolbar	`6.0.0`	`6.1.0`
mypy	`1.18.2`	`1.19.0`
django-stubs	`5.2.7`	`5.2.8`
djangorestframework-stubs	`3.16.4`	`3.16.5`
boto3-stubs	`1.40.52`	`1.41.5`
ruff	`0.14.0`	`0.14.7`
pre-commit	`4.3.0`	`4.5.0`

Updates django from 5.2.7 to 5.2.8

Commits

47fe39a [5.2.x] Bumped version for 5.2.8 release.
ac9fcf6 [5.2.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ...
6703f36 [5.2.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via th...
4f5d904 [5.2.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedire...
cbdf128 [5.2.x] Fixed #36704 -- Fixed system check error for proxy model with a compo...
6775888 [5.2.x] Fixed #36696 -- Fixed NameError when inspecting functions with deferr...
d5dfffa [5.2.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.
368f955 [5.2.x] Fixed #36681 -- Removed English pluralization bias from example in do...
71267c9 [5.2.x] Fixed #35095 -- Clarified Swiss number formatting in docs/topics/i18n...
9b37bd5 [5.2.x] Made RemoteTestResultTest.test_pickle_errors_detection() compatible w...
Additional commits viewable in compare view

Updates celery from 5.5.3 to 5.6.0

Release notes

Sourced from celery's releases.

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

Contributed by @auvipy in celery/celery#9620.

Security Fix: Broker Credential Leak Prevention

Fixed a security issue where broker URLs containing passwords were being logged in plaintext by the delayed delivery mechanism. Broker credentials are now properly sanitized in all log output.

Contributed by @giancarloromeo in celery/celery#9997.

Memory Leak Fixes

Two significant memory leaks have been fixed in this release:

Exception Handling Memory Leak: Fixed a critical memory leak in task exception handling that was particularly severe on Python 3.11+ due to enhanced traceback data. The fix properly breaks reference cycles in tracebacks to allow garbage collection.

Contributed by @jaiganeshs21 in celery/celery#9799.

Pending Result Memory Leak: Fixed a memory leak where AsyncResult subscriptions were not being cleaned up when results were forgotten.

Contributed by @tsoos99dev in celery/celery#9806.

ETA Task Memory Limit

New configuration option worker_eta_task_limit to prevent out-of-memory crashes when workers fetch large numbers of ETA or countdown tasks. Previously, workers could exhaust available memory when the broker contained many scheduled tasks.

Example usage:
app.conf.worker_eta_task_limit = 1000
Contributed by @sashu2310 in celery/celery#9853.

Queue Type Selection for Auto-created Queues

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights

See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below. Python 3.9 Minimum Version Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0. Additionally, this release includes initial support for Python 3.14. SQS: Reverted to pycurl from urllib3 The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users: Processing throughput dropped from ~100 tasks/sec to ~3/sec in some environments UnknownOperationException errors causing container crash loops Silent message processing failures with no error logs Users of the SQS transport must ensure pycurl is installed. If you removed pycurl after upgrading to Celery 5.5.0, you will need to reinstall it. Contributed by @auvipy <https://github.com/auvipy>_ in [#9620](https://github.com/celery/celery/issues/9620) <https://github.com/celery/celery/pull/9620>_. Security Fix: Broker Credential Leak Prevention Fixed a security issue where broker URLs containing passwords were being logged in plaintext by the delayed delivery mechanism. Broker credentials are now properly sanitized in all log output. Contributed by @giancarloromeo <https://github.com/giancarloromeo>_ in [#9997](https://github.com/celery/celery/issues/9997) <https://github.com/celery/celery/pull/9997>_.

Memory Leak Fixes </tr></table>

... (truncated)

Commits

cca1116 Prepare for release: v5.6.0 (#10010)
1133f22 Bump mypy from 1.14.1 to 1.19.0 (#10008)
0932d2c [pre-commit.ci] pre-commit autoupdate (#10007)
b446910 Prepare for (pre) release: v5.6.0rc2 (#10005)
3f0f0fe asynpool: Don't return from inside a finally block (#10000)
95d0552 Bump actions/checkout from 5 to 6 (#10003)
f32b92f Add Py39-314t to CI (#9999)
63c1910 Don't fail task on timeout during cold shutdown (#9678)
30649db Fix log leaking broker credentials (#9997)
929412e Remove Python 4.0 version condition for pytest dependencies (#9993)
Additional commits viewable in compare view

Updates django-structlog[celery] from 9.1.1 to 10.0.0

Changelog

Sourced from django-structlog[celery]'s changelog.

10.0.0 (October 22, 2025)

New: - Add 5xx and cancelled request log level config. See [#935](https://github.com/jrobichaud/django-structlog/issues/935) <https://github.com/jrobichaud/django-structlog/pull/935>. Special thanks to @fcortes <https://github.com/fcortes>. - Add python 3.14 support. See [#937](https://github.com/jrobichaud/django-structlog/issues/937) <https://github.com/jrobichaud/django-structlog/pull/937>_.

Changes: - Drop python 3.9 support.

Commits

6c2feb5 Merge pull request #938 from jrobichaud/fix-readme
efcd704 fix error in readme (gotta add a checker)
fa277f6 Merge pull request #937 from jrobichaud/python-3.14
238d813 Fix mypy regression when dropping 3.9
ee56156 Add python 3.14 support
f46461e Merge pull request #936 from jrobichaud/update-changelog
c76d11f update changelog
fbc9dea Merge pull request #935 from fcortes/add-access-log-level-config
a86d073 feat(env): add REQUEST_CANCELLED_LOG_LEVEL config
9268401 feat(env): add STATUX_5XX_LOG_LEVEL config
Additional commits viewable in compare view

Updates boto3 from 1.40.52 to 1.42.0

Commits

7ce189b Merge branch 'release-1.42.0'
29d92d1 Bumping version to 1.42.0
743f945 Add changelog entries from botocore
e3744fd Merge pull request #4629 from hssyoo/crt-mode
39215b6 Merge branch 'release-1.41.5'
79f2845 Merge branch 'release-1.41.5' into develop
0fc8075 Bumping version to 1.41.5
573d359 Add changelog entries from botocore
177e900 Remove backticks from error msg
ff9d88c Add warning
Additional commits viewable in compare view

Updates sentry-sdk from 2.42.0 to 2.46.0

Release notes

Sourced from sentry-sdk's releases.

2.46.0

Various fixes & improvements

Preserve metadata on wrapped coroutines (#5105) by @alexander-alderman-webb

Make imports defensive to avoid ModuleNotFoundError in Pydantic AI integration (#5135) by @alexander-alderman-webb

Fix OpenAI agents integration mistakenly enabling itself (#5132) by @sentrivana

Add instrumentation to embedding functions for various backends (#5120) by @constantinius

Improve embeddings support for OpenAI (#5121) by @constantinius

Enhance input handling for embeddings in LiteLLM integration (#5127) by @constantinius

Expect exceptions when re-raised (#5125) by @alexander-alderman-webb

Remove MagicMock from mocked ModelResponse (#5126) by @alexander-alderman-webb

2.45.0

Various fixes & improvements
OTLPIntegration (#4877) by @sl0thentr0py

Enable the new OTLP integration with the code snippet below, and your OpenTelemetry instrumentation will be automatically sent to Sentry's OTLP ingestion endpoint.
  import sentry_sdk
  from sentry_sdk.integrations.otlp import OTLPIntegration
sentry_sdk.init(
dsn="<your-dsn>",
# Add data like inputs and responses;
# see https://docs.sentry.io/platforms/python/data-management/data-collected/ for more info
send_default_pii=True,
integrations=[
OTLPIntegration(),
],
)
Under the hood, this will setup:

A SpanExporter that will automatically set up the OTLP ingestion endpoint from your DSN

A Propagator that ensures Distributed Tracing works

Trace/Span linking for all other Sentry events such as Errors, Logs, Crons and Metrics

If you were using the SentrySpanProcessor before, we recommend migrating over to OTLPIntegration since it's a much simpler setup.
feat(integrations): implement context management for invoke_agent spans (#5089) by @constantinius

feat(loguru): Capture extra (#5096) by @sentrivana

feat: Attach server.address to metrics (#5113) by @alexander-alderman-webb

fix: Cast message and detail attributes before appending exception notes (#5114) by @alexander-alderman-webb

fix(integrations): ensure that GEN_AI_AGENT_NAME is properly set for GEN_AI spans under an invoke_agent span (#5030) by @constantinius

fix(logs): Update sentry.origin (#5112) by @sentrivana

chore: Deprecate description truncation option for Redis spans (#5073) by @alexander-alderman-webb

chore: Deprecate max_spans LangChain parameter (#5074) by @alexander-alderman-webb

chore(toxgen): Check availability of pip and add detail to exceptions (#5076) by @alexander-alderman-webb

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.46.0

Various fixes & improvements

Preserve metadata on wrapped coroutines (#5105) by @alexander-alderman-webb

Make imports defensive to avoid ModuleNotFoundError in Pydantic AI integration (#5135) by @alexander-alderman-webb

Fix OpenAI agents integration mistakenly enabling itself (#5132) by @sentrivana

Add instrumentation to embedding functions for various backends (#5120) by @constantinius

Improve embeddings support for OpenAI (#5121) by @constantinius

Enhance input handling for embeddings in LiteLLM integration (#5127) by @constantinius

Expect exceptions when re-raised (#5125) by @alexander-alderman-webb

Remove MagicMock from mocked ModelResponse (#5126) by @alexander-alderman-webb

2.45.0

Various fixes & improvements
OTLPIntegration (#4877) by @sl0thentr0py

Enable the new OTLP integration with the code snippet below, and your OpenTelemetry instrumentation will be automatically sent to Sentry's OTLP ingestion endpoint.
  import sentry_sdk
  from sentry_sdk.integrations.otlp import OTLPIntegration
sentry_sdk.init(
dsn="<your-dsn>",
# Add data like inputs and responses;
# see https://docs.sentry.io/platforms/python/data-management/data-collected/ for more info
send_default_pii=True,
integrations=[
OTLPIntegration(),
],
)
Under the hood, this will setup:

A SpanExporter that will automatically set up the OTLP ingestion endpoint from your DSN

A Propagator that ensures Distributed Tracing works

Trace/Span linking for all other Sentry events such as Errors, Logs, Crons and Metrics

If you were using the SentrySpanProcessor before, we recommend migrating over to OTLPIntegration since it's a much simpler setup.
feat(integrations): implement context management for invoke_agent spans (#5089) by @constantinius

feat(loguru): Capture extra (#5096) by @sentrivana

feat: Attach server.address to metrics (#5113) by @alexander-alderman-webb

fix: Cast message and detail attributes before appending exception notes (#5114) by @alexander-alderman-webb

fix(integrations): ensure that GEN_AI_AGENT_NAME is properly set for GEN_AI spans under an invoke_agent span (#5030) by @constantinius

fix(logs): Update sentry.origin (#5112) by @sentrivana

chore: Deprecate description truncation option for Redis spans (#5073) by @alexander-alderman-webb

... (truncated)

Commits

d3375bc Update CHANGELOG.md
23abfe2 release: 2.46.0
ca19d63 feat: Preserve metadata on wrapped coroutines (#5105)
cf165e3 build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#5136)
b8d6a57 build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 (#5137)
c0c28b8 build(deps): bump supercharge/redis-github-action from 1.8.0 to 1.8.1 (#5138)
fb18c21 fix(pydantic-ai): Make imports defensive to avoid ModuleNotFoundError (#5135)
f945e38 Fix openai-agents import (#5132)
8596f89 fix(integrations): enhance input handling for embeddings in LiteLLM integrati...
0e6e808 test(openai-agents): Remove MagicMock from mocked ModelResponse (#5126)
Additional commits viewable in compare view

Updates google-api-python-client from 2.184.0 to 2.187.0

Release notes

Sourced from google-api-python-client's releases.

v2.187.0

2.187.0 (2025-11-04)

Features

admin: Update the api https://togithub.com/googleapis/google-api-python-client/commit/4ae6f5bc3f1a35cd69cb589c432c299df559dacf (8edf6d6)

aiplatform: Update the api https://togithub.com/googleapis/google-api-python-client/commit/131f59d6003dfbce3abfa00730dba9f90b9ca2ab (8edf6d6)

alloydb: Update the api https://togithub.com/googleapis/google-api-python-client/commit/8c341070f77639ef47f010d9410a814d65f0ed1e (8edf6d6)

analyticshub: Update the api https://togithub.com/googleapis/google-api-python-client/commit/9ba4beb4e61873283345d197c2909259948c5488 (8edf6d6)

androidpublisher: Update the api https://togithub.com/googleapis/google-api-python-client/commit/3db77266c2abb44ab149d0f83f58f87727280274 (8edf6d6)

apigee: Update the api https://togithub.com/googleapis/google-api-python-client/commit/a0411b6f5cc087f24e7ffb2c3e55b75e68f7d3c7 (8edf6d6)

apihub: Update the api https://togithub.com/googleapis/google-api-python-client/commit/f820a3b6cd6fdcb90a02f0635cc53b231fd340f3 (8edf6d6)

apphub: Update the api https://togithub.com/googleapis/google-api-python-client/commit/0cde10dd690e2ca303b8dddd26baee762b12e103 (8edf6d6)

artifactregistry: Update the api https://togithub.com/googleapis/google-api-python-client/commit/c5e5cbd48fac599f541b4bb0671f73504bd95331 (8edf6d6)

authorizedbuyersmarketplace: Update the api https://togithub.com/googleapis/google-api-python-client/commit/4b1a58e965c744981d87598ff4d1d9caeb5ad442 (8edf6d6)

backupdr: Update the api https://togithub.com/googleapis/google-api-python-client/commit/9ea2eb7f2c1bea7de204c1641ad2b2fa232cfad8 (8edf6d6)

biglake: Update the api https://togithub.com/googleapis/google-api-python-client/commit/f598d38025c1515b5e615f8437a64cbd43fed135 (8edf6d6)

bigquerydatatransfer: Update the api https://togithub.com/googleapis/google-api-python-client/commit/8dd81b0b258535afa8a6da984cd62f53892f7754 (8edf6d6)

bigquery: Update the api https://togithub.com/googleapis/google-api-python-client/commit/cee5b00a8ea42682301ccd82abb987ca985520b1 (8edf6d6)

chat: Update the api https://togithub.com/googleapis/google-api-python-client/commit/c0b2205c2dbc816c783d5d9da64aa8f01ac64976 (8edf6d6)

cloudfunctions: Update the api https://togithub.com/googleapis/google-api-python-client/commit/c40d929e0a719ba2f756c5e076edaafe97f0ade8 (8edf6d6)

cloudidentity: Update the api https://togithub.com/googleapis/google-api-python-client/commit/d55d33d3d82ed3045a20a6372368c06060aa7afe (8edf6d6)

cloudkms: Update the api https://togithub.com/googleapis/google-api-python-client/commit/aa4d8af269309a77657799795233644c83f41156 (8edf6d6)

cloudscheduler: Update the api https://togithub.com/googleapis/google-api-python-client/commit/68574b08de677e92f6b4ef73c9aa8981480fd244 (8edf6d6)

compute: Update the api https://togithub.com/googleapis/google-api-python-client/commit/385aad3a9db1c1e964dfabe2aec63510e495f929 (8edf6d6)

contactcenterinsights: Update the api https://togithub.com/googleapis/google-api-python-client/commit/abf00d5720427fc630a1b261b37bddf881d4aed8 (8edf6d6)

container: Update the api https://togithub.com/googleapis/google-api-python-client/commit/1fa286c4cf3c068ad7389a9f0c9d2672023d0a9a (8edf6d6)

dataplex: Update the api https://togithub.com/googleapis/google-api-python-client/commit/b082bcdea218f8eda4e3167f0d91086067f54326 (8edf6d6)

dataproc: Update the api https://togithub.com/googleapis/google-api-python-client/commit/46ecc1b97aee590e952a455f36a17ee57edc4878 (8edf6d6)

datastream: Update the api https://togithub.com/googleapis/google-api-python-client/commit/94712425b6c1a43eac2f609efa2bbe0130c1d157 (8edf6d6)

developerconnect: Update the api https://togithub.com/googleapis/google-api-python-client/commit/b5dbb37c9de1093601e5258e3390dbcba29090ab (8edf6d6)

dfareporting: Update the api https://togithub.com/googleapis/google-api-python-client/commit/eb29fdfc7d374ca0fa8a4521dfd03adf5f9d2aaa (8edf6d6)

dialogflow: Update the api https://togithub.com/googleapis/google-api-python-client/commit/0d073639ba2dd3cf64711a0b2e765c69cf40f301 (8edf6d6)

discoveryengine: Update the api https://togithub.com/googleapis/google-api-python-client/commit/0a0ffefd477c00e649e2449de4e978e97c7cb77e (8edf6d6)

displayvideo: Update the api https://togithub.com/googleapis/google-api-python-client/commit/b952757151bf40ee3e8a29b4ba97723e839d564f (8edf6d6)

dlp: Update the api https://togithub.com/googleapis/google-api-python-client/commit/c44af38454081885ad41f8e11e39e6d2b8be9250 (8edf6d6)

documentai: Update the api https://togithub.com/googleapis/google-api-python-client/commit/892d8591315553114022645b20b312d8f0b0e142 (8edf6d6)

drive: Update the api https://togithub.com/googleapis/google-api-python-client/commit/d0d23365f047c5bc095d500fbfb6364fea5b829f (8edf6d6)

file: Update the api https://togithub.com/googleapis/google-api-python-client/commit/33cc60f6da2e139c26e4037a0b2bd26a688b956f (8edf6d6)

firebaseappdistribution: Update the api https://togithub.com/googleapis/google-api-python-client/commit/d228cb515590e17fdbb2732f667db09940ff65f0 (8edf6d6)

firebaseapphosting: Update the api https://togithub.com/googleapis/google-api-python-client/commit/62fab0552fa333a8a79c0c433c515b029d743e3f (8edf6d6)

firebasedataconnect: Update the api https://togithub.com/googleapis/google-api-python-client/commit/5fc2c543b13bc466fccd2e89fef36fd6da5a905c (8edf6d6)

gkeonprem: Update the api https://togithub.com/googleapis/google-api-python-client/commit/aacb9659d60bed0a38c05936c788d6c96eb30599 (8edf6d6)

healthcare: Update the api https://togithub.com/googleapis/google-api-python-client/commit/ac074ed9332b6ebaa776c9ef7123d708fea89b8b (8edf6d6)

iamcredentials: Update the api https://togithub.com/googleapis/google-api-python-client/commit/a668b6ab59c1c913ed455c94e722cd0747850c9f (8edf6d6)

ids: Update the api https://togithub.com/googleapis/google-api-python-client/commit/e03595989016a96400343dbaa03371a049656d50 (8edf6d6)

logging: Update the api https://togithub.com/googleapis/google-api-python-client/commit/652fd598fcd529c3da0563990bf7f4941b172f55 (8edf6d6)

looker: Update the api https://togithub.com/googleapis/google-api-python-client/commit/483cba2bbcd375f8c6808e6ad386f8279b622fb6 (8edf6d6)

managedkafka: Update the api https://togithub.com/googleapis/google-api-python-client/commit/94e3bc173770528969b1abd935ac393934f6fda4 (8edf6d6)

... (truncated)

Commits

623c34f chore(main): release 2.187.0 (#2682)
8edf6d6 chore: Update discovery artifacts (#2681)
98ba848 chore(main): release 2.186.0 (#2679)
86cb133 chore: Update discovery artifacts (#2678)
33aee30 chore(main): release 2.185.0 (#2667)
8ee51c4 chore: Update discovery artifacts (#2672)
bde0919 chore(python): Add Python 3.14 to python post processor image (#2669)
f32e6fa chore: add googleapis/python-core-client-libraries as codeowner (#2670)
0fb1cf3 feat: add support for 3.14 (#2668)
3850298 chore: Update discovery artifacts (#2666)
See full diff in compare view

Updates google-auth from 2.41.1 to 2.43.0

Release notes

Sourced from google-auth's releases.

google-auth 2.43.0

2.43.0 (2025-11-05)

Features

Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) (1535eccb)

Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) (395e405b)

onboard google-auth to librarian (#1838) (c503eaa5)

v2.42.1

2.42.1 (2025-10-30)

Bug Fixes

Catch ValueError for json.loads() (#1842) (b074cad)

v2.42.0

2.42.0 (2025-10-24)

Features

Add trust boundary support for external accounts. (#1809) (36ecb1d)

Bug Fixes

Read scopes from ADC json for impersoanted cred (#1820) (62c0fc8)

Changelog

Sourced from google-auth's changelog.

2.43.0 (2025-11-05)

Features

Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) Add public wrapper for check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected. Also, fix check_use_client_cert to return boolean value. Change #1848 added the check_use_client_cert method that helps know if client cert should be used for mTLS connection. However, that was in a private class, thus, created a public wrapper of the same function so that it can be used by python Client Libraries. Also, updated check_use_client_cert to return a boolean value instead of existing string value for better readability and future scope. --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)

Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) The Python SDK will use a hybrid approach for mTLS enablement:

If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set (either true or false), the SDK will respect that setting. This is necessary for test scenarios and users who need to explicitly control mTLS behavior.

If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not set, the SDK will automatically enable mTLS only if it detects Managed Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF) certificate sources. In other cases where the variable is not set, mTLS will remain disabled. ** This change also adds the helper method check_use_client_cert and it's unit test, which will be used for checking the criteria for setting the mTLS to true ** This change is only for Auth-Library, other changes will be created for Client-Library use-cases. --------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)

onboard google-auth to librarian (#1838) This PR onboards google-auth library to the Librarian system. Wait for googleapis/google-auth-library-python#1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)

2.42.1 (2025-10-30)

Bug Fixes

Catch ValueError for json.loads() (#1842) (b074cad)

2.42.0 (2025-10-24)

Features

Add trust boundary support for external accounts. (#1809) (36ecb1d)

... (truncated)

Commits

89a8838 chore: librarian release pull request: 20251105T230735Z (#1863)
79564e2 chore: update prev version in state (#1862)
1535ecc feat: Add public wrapper for _mtls_helper.check_use_client_cert which enables...
54502a7 chore: update secret (#1860)
395e405 feat: Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MW...
f2708b2 chore: secret upadte (#1857)
c503eaa feat: onboard google-auth to librarian (#1838)
5d1b862 chore(main): release 2.42.1 (#1853)
b074cad fix: catch ValueError for json.loads() (#1842)
cb62f57 chore: secret update (#1851)
Additional commits viewable in compare view

Updates google-auth-httplib2 from 0.2.0 to 0.2.1

Release notes

Sourced from google-auth-httplib2's releases.

v0.2.1

0.2.1 (2025-10-30)

Bug Fixes

deps: Require google-auth >= 1.32.0,<3.0.0 (a69b725)

deps: Require httplib2 >= 0.19.0,<1.0.0 (a69b725)

Drop python 3.6; require python 3.7+ (a69b725)

Remove setup.cfg configuration for creating universal wheels (#191) (c2be0ae)

Changelog

Sourced from google-auth-httplib2's changelog.

0.2.1 (2025-10-30)

Bug Fixes

deps: Require google-auth >= 1.32.0,<3.0.0 (a69b725)

deps: Require httplib2 >= 0.19.0,<1.0.0 (a69b725)

Drop python 3.6; require python 3.7+ (a69b725)

Remove setup.cfg configuration for creating universal wheels (#191) (c2be0ae)

Commits

...

Description has been truncated

Bumps the dependencies group with 19 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.2.7` | `5.2.8` | | [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.0` | | [django-structlog[celery]](https://github.com/jrobichaud/django-structlog) | `9.1.1` | `10.0.0` | | [boto3](https://github.com/boto/boto3) | `1.40.52` | `1.42.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.42.0` | `2.46.0` | | [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.184.0` | `2.187.0` | | [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.41.1` | `2.43.0` | | [google-auth-httplib2](https://github.com/GoogleCloudPlatform/google-auth-library-python-httplib2) | `0.2.0` | `0.2.1` | | [google-auth-oauthlib](https://github.com/GoogleCloudPlatform/google-auth-library-python-oauthlib) | `1.2.2` | `1.2.3` | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.1` | | [faker](https://github.com/joke2k/faker) | `37.11.0` | `38.2.0` | | [ipython](https://github.com/ipython/ipython) | `9.6.0` | `9.7.0` | | [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `6.0.0` | `6.1.0` | | [mypy](https://github.com/python/mypy) | `1.18.2` | `1.19.0` | | [django-stubs](https://github.com/sponsors/typeddjango) | `5.2.7` | `5.2.8` | | [djangorestframework-stubs](https://github.com/sponsors/typeddjango) | `3.16.4` | `3.16.5` | | [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.40.52` | `1.41.5` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.0` | `0.14.7` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.0` | Updates `django` from 5.2.7 to 5.2.8 - [Commits](django/django@5.2.7...5.2.8) Updates `celery` from 5.5.3 to 5.6.0 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst) - [Commits](celery/celery@v5.5.3...v5.6.0) Updates `django-structlog[celery]` from 9.1.1 to 10.0.0 - [Changelog](https://github.com/jrobichaud/django-structlog/blob/main/docs/changelog.rst) - [Commits](jrobichaud/django-structlog@9.1.1...10.0.0) Updates `boto3` from 1.40.52 to 1.42.0 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.40.52...1.42.0) Updates `sentry-sdk` from 2.42.0 to 2.46.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.42.0...2.46.0) Updates `google-api-python-client` from 2.184.0 to 2.187.0 - [Release notes](https://github.com/googleapis/google-api-python-client/releases) - [Commits](googleapis/google-api-python-client@v2.184.0...v2.187.0) Updates `google-auth` from 2.41.1 to 2.43.0 - [Release notes](https://github.com/googleapis/google-auth-library-python/releases) - [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-python@v2.41.1...v2.43.0) Updates `google-auth-httplib2` from 0.2.0 to 0.2.1 - [Release notes](https://github.com/GoogleCloudPlatform/google-auth-library-python-httplib2/releases) - [Changelog](https://github.com/googleapis/google-auth-library-python-httplib2/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-python-httplib2@v0.2.0...v0.2.1) Updates `google-auth-oauthlib` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/GoogleCloudPlatform/google-auth-library-python-oauthlib/releases) - [Changelog](https://github.com/googleapis/google-auth-library-python-oauthlib/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-python-oauthlib@v1.2.2...v1.2.3) Updates `pytest` from 8.4.2 to 9.0.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.1) Updates `faker` from 37.11.0 to 38.2.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v37.11.0...v38.2.0) Updates `ipython` from 9.6.0 to 9.7.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.6.0...9.7.0) Updates `django-debug-toolbar` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/django-commons/django-debug-toolbar/releases) - [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst) - [Commits](django-commons/django-debug-toolbar@6.0.0...6.1.0) Updates `mypy` from 1.18.2 to 1.19.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.18.2...v1.19.0) Updates `django-stubs` from 5.2.7 to 5.2.8 - [Commits](https://github.com/sponsors/typeddjango/commits) Updates `djangorestframework-stubs` from 3.16.4 to 3.16.5 - [Commits](https://github.com/sponsors/typeddjango/commits) Updates `boto3-stubs` from 1.40.52 to 1.41.5 - [Release notes](https://github.com/youtype/mypy_boto3_builder/releases) - [Commits](https://github.com/youtype/mypy_boto3_builder/commits) Updates `ruff` from 0.14.0 to 0.14.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.0...0.14.7) Updates `pre-commit` from 4.3.0 to 4.5.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.3.0...v4.5.0) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: celery dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: django-structlog[celery] dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: boto3 dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sentry-sdk dependency-version: 2.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: google-api-python-client dependency-version: 2.187.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: google-auth dependency-version: 2.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: google-auth-httplib2 dependency-version: 0.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: google-auth-oauthlib dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pytest dependency-version: 9.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: faker dependency-version: 38.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: ipython dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: django-debug-toolbar dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: mypy dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: django-stubs dependency-version: 5.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: djangorestframework-stubs dependency-version: 3.16.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: boto3-stubs dependency-version: 1.41.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ruff dependency-version: 0.14.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pre-commit dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the dependencies group across 1 directory with 19 updates #555

Bump the dependencies group across 1 directory with 19 updates #555

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

Python 3.9 Minimum Version

SQS: Reverted to `pycurl` from `urllib3`

Security Fix: Broker Credential Leak Prevention

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the dependencies group across 1 directory with 19 updates #555

Are you sure you want to change the base?

Bump the dependencies group across 1 directory with 19 updates #555

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.6.0

Key Highlights

Python 3.9 Minimum Version

SQS: Reverted to pycurl from urllib3

Security Fix: Broker Credential Leak Prevention

Memory Leak Fixes

ETA Task Memory Limit

Queue Type Selection for Auto-created Queues

5.6.0

Python 3.9 Minimum Version

SQS: Reverted to pycurl from urllib3

Security Fix: Broker Credential Leak Prevention

10.0.0 (October 22, 2025)

2.46.0

Various fixes & improvements

2.45.0

Various fixes & improvements

2.46.0

Various fixes & improvements

2.45.0

Various fixes & improvements

v2.187.0

2.187.0 (2025-11-04)

Features

google-auth 2.43.0

2.43.0 (2025-11-05)

Features

v2.42.1

2.42.1 (2025-10-30)

Bug Fixes

v2.42.0

2.42.0 (2025-10-24)

Features

Bug Fixes

2.43.0 (2025-11-05)

Features

2.42.1 (2025-10-30)

Bug Fixes

2.42.0 (2025-10-24)

Features

v0.2.1

0.2.1 (2025-10-30)

Bug Fixes

0.2.1 (2025-10-30)

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 1, 2025 •

edited

Loading

SQS: Reverted to `pycurl` from `urllib3`

SQS: Reverted to `pycurl` from `urllib3`