chore(deps): update python-nonmajor

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
google-adk (changelog)	==1.20.0 → ==1.22.0
google-auth	==2.45.0 → ==2.47.0
google-auth-oauthlib	==1.2.1 → ==1.2.3
langchain-core (source, changelog)	==1.2.6 → ==1.2.7
opentelemetry-exporter-gcp-trace (source)	==1.9.0 → ==1.11.0
opentelemetry-exporter-otlp-proto-http	==1.37.0 → ==1.39.1
opentelemetry-sdk	==1.37.0 → ==1.39.1
typing-extensions (changelog)	==4.12.2 → ==4.15.0

---

Release Notes

google/adk-python (google-adk)

v1.22.0

Compare Source

Features

• [Core]

  • Make LlmAgent.model optional with a default fallback (b287215).
  • Support regex for allowed origins (2ea6e51).
  • Enable PROGRESSIVE_SSE_STREAMING feature by default (0b1cff2).

• [Evals]

  • Add custom instructions support to LlmBackedUserSimulator (a364388).
  • Introduce a post-hoc, per-turn evaluator for user simulations (e515e0f).

• [Tools]

  • Expose mcps streamable http custom httpx factory parameter (bfed19c).
  • Add a handwritten tool for Cloud Pub/Sub (b6f6dcb).
  • Add token_endpoint_auth_method support to OAuth2 credentials (8782a69).

• [Services]

  • Introduce new JSON-based database schema for DatabaseSessionService, which will be used for newly-created databases. A migration command and script are provided.(7e6ef71 ba91fea ce64787).
  • Set log level when deploying to Agent Engine (1f546df).

• [A2A]

  • Update event_converter used in A2ARemote agent to use a2a_task.status.message only if parts are non-empty (e4ee9d7).

Bug Fixes

• Add checks for event content and parts before accessing (5912835).
• Validate app name in adk create command (742c926).
• Prevent .env files from overriding existing environment variables (0827d12).
• Prevent ContextFilterPlugin from creating orphaned function responses (e32f017).
• Update empty event check to include executable code and execution results (688f48f).
• Make the BigQuery analytics plugin work with agents that don't have instructions such as the LoopAgent (8bed01c).
• Label response as thought if task is immediately returned as working (4f3b733).
• Move and enhance the deprecation warning for the plugins argument in "_validate_runner_params" to the beginning of the function (43270bc).
• Oauth refresh not triggered on token expiry (69997cd).
• Fix double JSON encoding when saving eval set results (fc4e3d6).
• Allow string values for ToolTrajectoryCriterion.match_type (93d6e4c).
• Fix inconsistent method signatures for evaluate_invocations (0918b64).
• Honor the modalities parameter in adk api server for live API (19de45b).
• Filter out thought parts in lite_llm._get_content (1ace8fc).
• Rehydration of EventActions in StorageEvent.to_event (838530e).
• Heal missing tool results before LiteLLM requests (6b7386b).
• Refine Ollama content flattening and provider checks (c6f389d).
• Add MIME type inference and default for file URIs in LiteLLM (5c4bae7).
• Use mode='json' in model_dump to serialize bytes correctly when using telemetry (96c5db5).
• Avoid local .adk storage in Cloud Run/GKE (b30c2f4).
• Remove fallback to cached exchanged credential in _load_existing_credential (1ae0e16).
• Handle overriding of requirements when deploying to agent engine (38a30a4).
• Built-in agents (names starting with "__") now use in-memory session storage instead of creating .adk folders in the agents directory (e3bac1a).
• Change error_message column type to TEXT in DatabaseSessionService (8335f35).
• Add schema type sanitization to OpenAPI spec parser (6dce7f8).
• Prevent retry_on_errors from retrying asyncio.CancelledError (30d3411).
• Include back-ticks around the BQ asset names in the tools examples (8789ad8).
• Fix issue with MCP tools throwing an error (26e77e1).
• Exclude thought parts when merging agent output (07bb164).
• Prepend "https://" to the MCP server url only if it doesn't already have a scheme (71b3289).
• Split SSE events with both content and artifactDelta in ADK Web Server (084fcfa).
• Propagate RunConfig custom metadata to all events (e3db2d0).
• Harden YAML builder tmp save/cleanup(6f259f0).
• Ignore adk-bot administrative actions in stale agent (3ec7ae3).
• Only prepend "https://" to the MCP server url if it doesn't already have a scheme (71b3289).
• Check all content parts for emptiness in _contains_empty_content (f35d129).

Improvements

• Remove unnecessary event loop creation in LiveRequstQueue constructor (ecc9f18).
• Close database engines to avoid aiosqlite pytest hangs (4ddb2cb).
• Add override_feature_enabled to override the default feature enable states (a088506).
• Move SQLite migration script to migration/ folder (e8ab7da).
• Update latest Live Model names for sample agent (f1eb1c0).
• Update google-genai and google-cloud-aiplatform versions (d58ea58).
• Introduce MetricInfoProvider interface, and refactor metric evaluators to use this interface to provide MetricInfo (5b7c8c0).
• Update _flatten_ollama_content return type and add tests (fcea86f).
• Add disambiguation message to enterprise_search_tool (8329fec).
• Add x-goog-user-project header to http calls in API Registry (0088b0f).
• Set the default response modality to AUDIO only (a4b914b).

v1.21.0

Compare Source

Features

• [Interactions API Support]

  • The newly released Gemini Interactions API is supported in ADK now. To use it:

  Agent(
    model=Gemini(
        model="gemini-3-pro-preview",
        use_interactions_api=True,
    ),
    name="...",
    description="...",
    instruction="...",
  )

  see samples for details

• [Services]

  • Add add_session_to_memory to CallbackContext and ToolContext to explicitly save the current session to memory (7b356dd)

• [Plugins]

  • Add location for table in agent events in plugin BigQueryAgentAnalytics (507424a)
  • Upgrade BigQueryAgentAnalyticsPlugin to v2.0 with improved performance, multimodal support, and reliability (7b2fe14)

• [A2A]

  • Adds ADK EventActions to A2A response (32e87f6)

• [Tools]

  • Add header_provider to OpenAPIToolset and RestApiTool (e1a7593)
  • Allow overriding connection template (cde7f7c)
  • Add SSL certificate verification configuration to OpenAPI tools using the verify parameter (9d2388a)
  • Use json schema for function tool declaration when feature enabled (cb3244b)

• [Models]

  • Add Gemma3Ollama model integration and a sample (e9182e5)

Bug Fixes

• Install dependencies for py 3.10 (9cccab4)
• Refactor LiteLLM response schema formatting for different models (894d8c6)
• Resolve project and credentials before creating Spanner client (99f893a)
• Avoid false positive "App name mismatch" warnings in Runner (6388ba3)
• Update the code to work with either 1 event or more than 1 events (4f54660)
• OpenAPI schema generation by skipping JSON schema for judge_model_config (56775af)
• Add tool_name_prefix support to OpenAPIToolset (82e6623)
• Pass context to client interceptors (143ad44)
• Yield event with error code when agent run raised A2AClientHTTPError (b7ce5e1)
• Handle string function responses in LiteLLM conversion (2b64715)
• ApigeeLLM support for Built-in tools like GoogleSearch, BuiltInCodeExecutor when calling Gemini models through Apigee (a9b853f)
• Extract and propagate task_id in RemoteA2aAgent (82bd4f3)
• Update FastAPI and Starlette to fix CVE-2025-62727 (ReDoS vulnerability) (c557b0a)
• Add client id to token exchange (f273517)

Improvements

• Normalize multipart content for LiteLLM's ollama_chat provider (055dfc7)
• Update adk web, fixes image not rendering, state not updating, update drop down box width and trace icons (df86847)
• Add sample agent for interaction api integration (68d7048)
• Update genAI SDK version (f0bdcab)
• Introduce build_function_declaration_with_json_schema to use pydantic to generate json schema for FunctionTool (51a638b)
• Update component definition for triaging agent (ee743bd)
• Migrate Google tools to use the new feature decorator (bab5729)
• Migrate computer to use the new feature decorator (1ae944b)
• Add Spanner execute sql query result mode using list of dictionaries (f22bac0)
• Improve error message for missing invocation_id and new_message in run_async (de841a4)

googleapis/google-auth-library-python (google-auth)

v2.47.0

Compare Source

Features

• drop cachetools dependency in favor of simple local implementation (#​1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)

Bug Fixes

• Python 3.8 support (#​1918) (60dc20014a35ec4ba71e8065b9a33ecbdbeca97a)

v2.46.0

Compare Source

Documentation

• update urllib3 docstrings for v2 compatibility (#​1903) (3f1aeea2d1014ea1d244a4c3470e52d74d55404b)

Features

• Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#​1907) (0b9107d573123e358c347ffa067637f992af61b4)

Bug Fixes

• add types to default and verify_token and Request init based on comments in the source code. (#​1588) (59a5f588f7793b59d923a4185c8c07738da618f7)
• fix the document of secure_authorized_session (#​1536) (5d0014707fc359782df5ccfcaa75fd372fe9dce3)
• remove setup.cfg configuration for creating universal wheels (#​1693) (c767531ce05a89002d109f595187aff1fcaacfb7)
• use .read() instead of .content.read() in aiohttp transport (#​1899) (12f4470f808809e8abf1141f98d88ab720c3899b)
• raise RefreshError for missing token in impersonated credentials (#​1897) (94d04e090fdfc61926dd32bc1d65f8820b9cede5)
• Fix test coverage for mtls_helper (#​1886) (02e71631fe275d93825c2e957e830773e75133f7)

GoogleCloudPlatform/google-auth-library-python-oauthlib (google-auth-oauthlib)

v1.2.3

Compare Source

Bug Fixes

• Add upper-bound to google-auth dependency (#​423) (d7921f9)
• Drop support for Python 3.6 (4b1a5f3)
• Explicitly declare Python 3.13 support (4b1a5f3)

v1.2.2

Compare Source

Bug Fixes

• Do not include docs/conf.py & scripts in wheel (#​328) (78940df)
• Let OS select an available port when running TestInstalledAppFlow (#​407) (6060d65), closes #​381
• Remove setup.cfg configuration for creating universal wheels (#​405) (0b962ed)

GoogleCloudPlatform/opentelemetry-operations-python (opentelemetry-exporter-gcp-trace)

v1.11.0

Compare Source

What's Changed

• Logging exporter support to output structured json instead of making RPCs by @​aabmass in #​440
• Add temporary support for aiplatform.googleapis.com/ReasoningEngine monitored resource in logging exporter by @​aabmass in #​445
• Set upper bound on opentelemetry-sdk for logging breaking changes by @​aabmass in #​447

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-python@v1.10.0...v1.11.0

v1.10.0: release

Compare Source

What's Changed

• Add space to logging exporter README. Make minor update to releasing.md. by @​DylanRussell in #​379
• Update OTLP trace example. by @​DylanRussell in #​386
• Add telemetry endpoint to trace examples by @​DylanRussell in #​395
• Setup OTel logs and events in quickstart by @​aabmass in #​397
• Update quickstart README.md by @​aabmass in #​400
• Fix lint and style issues and quickstart with ruff by @​aabmass in #​399
• Use uv in instrumentation quickstart by @​aabmass in #​402
• Add microsecond precision to quickstart logs by @​aabmass in #​401
• Update go dependencies in samples/instrumentation-quickstart/integrationtest by @​aabmass in #​403
• LangGraph console agent with instrumentation sample by @​aabmass in #​404
• Drop support for python3.7 by @​DylanRussell in #​408
• Update Cloud Logging Exporter to handle bytes in dict body by @​DylanRussell in #​407
• Bump urllib3 from 2.4.0 to 2.5.0 in /samples/langgraph-sql-agent by @​dependabot[bot] in #​412
• Add support for exponential histograms by @​tgwizard in #​413
• Remove PatchedVertexAI since the upstream bug is fixed by @​aabmass in #​415
• Drop support for python 3.8 by @​DylanRussell in #​419
• Add ADK instrumentation sample by @​psx95 in #​418
• Add region tags & cleanup ADK Sample by @​psx95 in #​421
• Do not write a warning log when LogRecord.body is None by @​DylanRussell in #​427
• Cleanup the resource detector code a bit by @​DylanRussell in #​389
• Update cloud logging exporter to correctly handle when LogRecord.body is of type Mapping[str, List[Mapping]] by @​DylanRussell in #​430
• Use LogRecord.event_name to set the log ID when the gcp log name attribute is not present. by @​DylanRussell in #​417
• Update logic in cloud logging exporter to handle various types in LogRecord.attributes by @​DylanRussell in #​432

New Contributors

• @​tgwizard made their first contribution in #​413
  Full Changelog: GoogleCloudPlatform/opentelemetry-operations-python@v1.9.0...v1.10.0

open-telemetry/opentelemetry-python (opentelemetry-exporter-otlp-proto-http)

v1.39.1: Version 1.39.1/0.60b1

Compare Source

This is a patch release on the previous 1.39.0/0.60b0 release, fixing the issue(s) below.

• Silence events API warnings for internal users (#​4847)

v1.39.0

Compare Source

• opentelemetry-api: Convert objects of any type other than AnyValue in attributes to string to be exportable
  (#​4808)

• docs: Added sqlcommenter example
  (#​4734)

• build: bump ruff to 0.14.1
  (#​4782)

• Add opentelemetry-exporter-credential-provider-gcp as an optional dependency to opentelemetry-exporter-otlp-proto-grpc
  and opentelemetry-exporter-otlp-proto-http
  (#​4760)

• feat: implement on ending in span processor
  (#​4775)

• semantic-conventions: Bump to 1.38.0
  (#​4791)

• [BREAKING] Remove LogData and extend SDK LogRecord to have instrumentation scope
  (#​4676)

• [BREAKING] Rename several classes from Log to LogRecord
  (#​4647)

  Migration Guide:

  LogData has been removed. Users should update their code as follows:

  • For Log Exporters: Change from Sequence[LogData] to Sequence[ReadableLogRecord]

    # Before
    from opentelemetry.sdk._logs import LogData
    def export(self, batch: Sequence[LogData]) -> LogRecordExportResult:
        ...
    
    # After
    from opentelemetry.sdk._logs import ReadableLogRecord
    def export(self, batch: Sequence[ReadableLogRecord]) -> LogRecordExportResult:
        ...

  • For Log Processors: Use ReadWriteLogRecord for processing, ReadableLogRecord for exporting

    # Before
    from opentelemetry.sdk._logs import LogData
    def on_emit(self, log_data: LogData):
        ...
    
    # After
    from opentelemetry.sdk._logs import ReadWriteLogRecord, ReadableLogRecord
    def on_emit(self, log_record: ReadWriteLogRecord):
        # Convert to ReadableLogRecord before exporting
        readable = ReadableLogRecord(
            log_record=log_record.log_record,
            resource=log_record.resource or Resource.create({}),
            instrumentation_scope=log_record.instrumentation_scope,
            limits=log_record.limits,
        )
        ...

  • Accessing log data: Use the same attributes on ReadableLogRecord/ReadWriteLogRecord

    • log_record.log_record - The API LogRecord (contains body, severity, attributes, etc.)
    • log_record.resource - The Resource
    • log_record.instrumentation_scope - The InstrumentationScope (now included, was in LogData before)
    • log_record.limits - The LogRecordLimits

• Mark the Events API/SDK as deprecated. The Logs API/SDK should be used instead, an event is now a LogRecord with the event_name field set
  (#​4654).

• Fix type checking for built-in metric exporters
  (#​4820)

v1.38.0

Compare Source

• Add rstcheck to pre-commit to stop introducing invalid RST
  (#​4755)
• logs: extend Logger.emit to accept separated keyword arguments
  (#​4737)
• logs: add warnings for classes that would be deprecated and renamed in 1.39.0
  (#​4771)

python/typing_extensions (typing-extensions)

v4.15.0

Compare Source

No user-facing changes since 4.15.0rc1.

v4.14.1

Compare Source

• Fix usage of typing_extensions.TypedDict nested inside other types
  (e.g., typing.Type[typing_extensions.TypedDict]). This is not allowed by the
  type system but worked on older versions, so we maintain support.

v4.14.0

Compare Source

Changes since 4.14.0rc1:

• Remove __or__ and __ror__ methods from typing_extensions.Sentinel
  on Python versions <3.10. PEP 604 was introduced in Python 3.10, and
  typing_extensions does not generally attempt to backport PEP-604 methods
  to prior versions.
• Further update typing_extensions.evaluate_forward_ref with changes in Python 3.14.

v4.13.2

Compare Source

• Fix TypeError when taking the union of typing_extensions.TypeAliasType and a
  typing.TypeAliasType on Python 3.12 and 3.13.
  Patch by Joren Hammudoglu.
• Backport from CPython PR #​132160
  to avoid having user arguments shadowed in generated __new__ by
  @typing_extensions.deprecated.
  Patch by Victorien Plot.

v4.13.1

Compare Source

Bugfixes:

• Fix regression in 4.13.0 on Python 3.10.2 causing a TypeError when using Concatenate.
  Patch by Daraan.
• Fix TypeError when using evaluate_forward_ref on Python 3.10.1-2 and 3.9.8-10.
  Patch by Daraan.

v4.13.0

Compare Source

No user-facing changes since 4.13.0rc1.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[anubhav756]

/gcbrun