fix(deps): Update dependency google-auth to v2.57.0

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
google-auth (source)	==2.38.0 → ==2.57.0
google-auth (source)	==2.42.1 → ==2.57.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

googleapis/google-cloud-python (google-auth)

v2.57.0: google-cloud-container: v2.57.0

Compare Source

Features

• add allowed_unsafe_sysctls in NodeKubeletConfig (82a928a)
• add allowed_unsafe_sysctls in NodeKubeletConfig (4c98f4e)
• add alpha_cluster_feature_gates in Cluster (82a928a)
• add alpha_cluster_feature_gates in Cluster (4c98f4e)
• add anonymous_authentication_config in Cluster (82a928a)
• add auto_monitoring_config in ManagedPrometheusConfig (82a928a)
• add auto_monitoring_config in ManagedPrometheusConfig (4c98f4e)
• add autopilot_compatibility_auditing_enabled in WorkloadPolicyConfig (82a928a)
• add autopilot_compatibility_auditing_enabled in WorkloadPolicyConfig (4c98f4e)
• add ClusterUpgradeInfo (82a928a)
• add ClusterUpgradeInfo (4c98f4e)
• add confidential_instance_type in ConfidentialNodes (82a928a)
• add confidential_instance_type in ConfidentialNodes (4c98f4e)
• add container_log_max_files in NodeKubeletConfig (82a928a)
• add container_log_max_files in NodeKubeletConfig (4c98f4e)
• add container_log_max_size in NodeKubeletConfig (82a928a)
• add container_log_max_size in NodeKubeletConfig (4c98f4e)
• add control_plane_endpoints_config in Cluster (82a928a)
• add data_cache_count in EphemeralStorageLocalSsdConfig (82a928a)
• add data_cache_count in EphemeralStorageLocalSsdConfig (4c98f4e)
• add desired_anonymous_authentication_config in ClusterUpdate (82a928a)
• add desired_anonymous_authentication_config in ClusterUpdate (4c98f4e)
• add desired_compliance_posture_config in ClusterUpdate (82a928a)
• add desired_control_plane_endpoints_config in ClusterUpdate (82a928a)
• add desired_default_enable_private_nodes in ClusterUpdate (82a928a)
• add desired_disable_l4_lb_firewall_reconciliation in ClusterUpdate (82a928a)
• add desired_disable_l4_lb_firewall_reconciliation in ClusterUpdate (4c98f4e)
• add desired_enterprise_config in ClusterUpdate (82a928a)
• add desired_node_pool_auto_config_linux_node_config in ClusterUpdate (82a928a)
• add desired_pod_autoscaling in ClusterUpdate (82a928a)
• add desired_pod_autoscaling in ClusterUpdate (4c98f4e)
• add desired_rbac_binding_config in ClusterUpdate (82a928a)
• add disable_l4_lb_firewall_reconciliation in NetworkConfig (82a928a)
• add disable_l4_lb_firewall_reconciliation in NetworkConfig (4c98f4e)
• add effective_cgroup_mode in NodeConfig (82a928a)
• add event_type in UpgradeInfoEvent (82a928a)
• add event_type in UpgradeInfoEvent (4c98f4e)
• add extended_support_end_time in UpgradeInfoEvent (82a928a)
• add extended_support_end_time in UpgradeInfoEvent (4c98f4e)
• add FetchClusterUpgradeInfoRequest (82a928a)
• add FetchClusterUpgradeInfoRequest (4c98f4e)
• add FetchNodePoolUpgradeInfoRequest (82a928a)
• add FetchNodePoolUpgradeInfoRequest (4c98f4e)
• add flex_start in NodeConfig (82a928a)
• add flex_start in NodeConfig (4c98f4e)
• add flex_start in UpdateNodePoolRequest (82a928a)
• add flex_start in UpdateNodePoolRequest (4c98f4e)
• add high_scale_checkpointing_config in AddonsConfig (82a928a)
• add high_scale_checkpointing_config in AddonsConfig (4c98f4e)
• add image_gc_high_threshold_percent in NodeKubeletConfig (82a928a)
• add image_gc_high_threshold_percent in NodeKubeletConfig (4c98f4e)
• add image_gc_low_threshold_percent in NodeKubeletConfig (82a928a)
• add image_gc_low_threshold_percent in NodeKubeletConfig (4c98f4e)
• add image_maximum_gc_age in NodeKubeletConfig (82a928a)
• add image_maximum_gc_age in NodeKubeletConfig (4c98f4e)
• add image_minimum_gc_age in NodeKubeletConfig (82a928a)
• add image_minimum_gc_age in NodeKubeletConfig (4c98f4e)
• add JOBSET in MonitoringComponentConfig.Component (82a928a)
• add JOBSET in MonitoringComponentConfig.Component (4c98f4e)
• add KCP_HPA in LoggingComponentConfig.Component (82a928a)
• add KCP_HPA in LoggingComponentConfig.Component (4c98f4e)
• add linux_node_config in NodePoolAutoConfig (82a928a)
• add local_ssd_encryption_mode in NodeConfig (82a928a)
• add max_run_duration in NodeConfig (82a928a)
• add max_run_duration in NodeConfig (4c98f4e)
• add max_run_duration in UpdateNodePoolRequest (82a928a)
• add max_run_duration in UpdateNodePoolRequest (4c98f4e)
• add MemoryManager (82a928a)
• add mitigated_versions in SecurityBulletinEvent (82a928a)
• add mitigated_versions in SecurityBulletinEvent (4c98f4e)
• add NODE_SERVICE_ACCOUNT_MISSING_PERMISSIONS in StatusCondition.Code (82a928a)
• add NODE_SERVICE_ACCOUNT_MISSING_PERMISSIONS in StatusCondition.Code (4c98f4e)
• add NodePoolUpgradeInfo (82a928a)
• add NodePoolUpgradeInfo (4c98f4e)
• add parallelstore_csi_driver_config in AddonsConfig (82a928a)
• add performance_monitoring_unit in AdvancedMachineFeatures (82a928a)
• add performance_monitoring_unit in AdvancedMachineFeatures (4c98f4e)
• add pod_autoscaling in Cluster (82a928a)
• add pod_autoscaling in Cluster (4c98f4e)
• add private_endpoint_enforcement_enabled in MasterAuthorizedNetworksConfig (82a928a)
• add rbac_binding_config in Cluster (82a928a)
• add standard_support_end_time in UpgradeInfoEvent (82a928a)
• add standard_support_end_time in UpgradeInfoEvent (4c98f4e)
• add storage_pools in NodeConfig (82a928a)
• add storage_pools in UpdateNodePoolRequest (82a928a)
• add topology_manager in NodeKubeletConfig (82a928a)
• add topology_manager in NodeKubeletConfig (4c98f4e)
• add TopologyManager (82a928a)
• add UPGRADE_INFO_EVENT in NotificationConfig.EventType (82a928a)
• add UPGRADE_INFO_EVENT in NotificationConfig.EventType (4c98f4e)
• add upgrade_target_version in ReleaseChannelConfig (82a928a)
• add UpgradeDetails (82a928a)
• add UpgradeDetails (4c98f4e)
• add user_managed_keys_config in Cluster (82a928a)
• add user_managed_keys_config in ClusterUpdate (82a928a)

Documentation

• Minor documentation updates (82a928a)
• Minor documentation updates (4c98f4e)

v2.56.3: google-auth: v2.56.3

Compare Source

Bug Fixes

• auth: avoid creating mTLS SSL context for custom async transports (#​17825) (fbe33f9), refs #​17622
• auth: only trigger mTLS certificate rotation on mTLS endpoints (#​17928) (f7b49ea)
• auth: properly extract stdout from gnubby webauthn plugin failures (#​17885) (744e826)
• deduplicate x-goog-api-client headers (#​17616) (6167e41)
• oauth2: avoid redundant JWKS network fetches (#​17891) (de53298)

Performance Improvements

• auth: use generator expression in any() to allow short-circuiting (735e565)
• auth: use generator expression in any() to allow short-circuiting (#​17937) (735e565)

v2.56.2: google-auth: v2.56.2

Compare Source

Bug Fixes

• auth: centralize cert discovery logic and steps (#​17696) (edc0423)
• auth: exit early when agent cert config is outside well-known directory (#​17762) (61e795a)
• transport: propagate mTLS adapter to auth session and fix connection leaks (#​17689) (8289d32)
• update _SERVICE_ACCOUNT_EMAIL_PATTERN to require .gserviceaccount.com suffix (#​17748) (b60bb04)

v2.56.1: google-auth: v2.56.1

Compare Source

Bug Fixes

• disable RAB lookup for Domain-Wide Delegation (#​17763) (00eb128), closes #​17703

v2.56.0: google-auth: v2.56.0

Compare Source

Features

• auth: Implement python mtls helpers (#​17495) (e7baed1)

Bug Fixes

• google-auth: add aiohttp bound for Python 3.14 (#​17654) (b2ec761)
• google-auth: add bounds for urllib3 and packaging dependencies (#​17647) (e9c6265)
• google-auth: add cryptography bound for Python 3.14 (#​17649) (e9ca4c4)
• google-auth: add gRPC extra and clean up obsolete TODOs (#​17644) (6da41e8), closes #​1735 #​1736 #​1739
• google-auth: raise rsa extra lower bound to 4.0 (#​17652) (4087828)

v2.55.2: google-auth: v2.55.2

Compare Source

Bug Fixes

• auth: Agentic Identites mTLS gaps fix _is_mtls and SslCredentials. (#​17387) (7bfa41a)
• auth: align mTLS discovery and enforce fail-fast transport configuration. (#​17470) (f492d3d)
• auth: handle PermissionError on workload certificates to avoid startup hang and crash (#​17568) (f538ad8)

v2.55.1: google-auth: v2.55.1

Compare Source

Bug Fixes

• auth: lower regional access boundary logs from warning to debug. (#​17571) (1ef4183), closes #​17515

v2.55.0: google-auth: v2.55.0

Compare Source

Features

• make RAB feature production ready (#​17390) (af193931)

Bug Fixes

• run async background boundary refresh on detached session (#​17441) (56cbea85)

v2.54.0

Compare Source

v2.53.0

Compare Source

v2.52.0

Compare Source

v2.51.0

Compare Source

v2.50.0: google-auth: v2.50.0

Compare Source

v2.50.0 (2026-04-30)

v2.49.2: google-auth: v2.49.2

Compare Source

Bug Fixes

• use requests transport for GCE MDS (#​16480) (614a3d04)

v2.49.1: google-auth: v2.49.1

Compare Source

Bug Fixes

• fix request session error (#​16050) (bfd93225)

• remove deprecated rsa dependency (#​16020) (e8927b9c)

v2.49.0: google-auth: v2.49.0

Compare Source

Features

• Add helper methods for asynchronous x.509 certificate discovery (#​1956) (3368f27c)

• Support timeout as aiohttp.ClientTimeout and total_attempts (max retries) in AsyncAuthorizedSession (#​1961) (4d818b93)

• mTLS configuration via x.509 for asynchronous session in google-auth (#​1959) (7b70fead)

• support an alternative env to decide if mtls should be enabled (#​1945) (89fc6f2e)

Bug Fixes

• gracefully fallback if workload fields are missing from cert config (#​16022) (3ed2d680)

v2.48.0: google-cloud-dialogflow: v2.48.0

Features

• regenerate google-cloud-dialogflow (#​17129) (b6bb63ea)

v2.47.0: google-cloud-dialogflow: v2.47.0

v2.47.0 (2026-03-26)

v2.46.0: google-cloud-dialogflow: v2.46.0

Features

• added a new field StreamingAnalyzeContentRequest.output_multiple_utterances (PiperOrigin-RevId: 8629590) (a6b40b31)

v2.45.0: google-cloud-dialogflow 2.45.0

Features

• updated v2beta1 dialogflow client libraries (PiperOrigin-RevId: 8437558) (17cc1289)

• updated v2 dialogflow client libraries (PiperOrigin-RevId: 8437037) (17cc1289)

v2.44.0: google-cloud-dialogflow 2.44.0

Features

• add agentDesktopSource field to the Participant object (PiperOrigin-RevId: 8304603) (03e69912)

Documentation

• Update evaluator version from output only to optional. (PiperOrigin-RevId: 8304603) (03e69912)

• Add further clarification for when the event Type CONVERSATION_FINISHED is fired (PiperOrigin-RevId: 8304603) (03e69912)

v2.43.0: google-cloud-dialogflow 2.43.0

Features

• Improved generator quota management (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Added tool support for AI Coach feature (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Expose debug info field in ConversationProfile (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Expose skip_empty_event_based_suggestion in ConversationProfile (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Added support for Build Your Own Assist feature (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Added support for AI Coach feature (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Context references added to conversation for dynamic data ingestion (PiperOrigin-RevId: 8226921) (c3c2fbba)

• A new field &#​39;security_settings&#​39; is added to GenerateStatelessSuggestionRequest (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Added Vertex extension tool support to v2/v2beta1 (PiperOrigin-RevId: 8226921) (c3c2fbba)

• add a turn complete signal to BidiStreamingAnalyzeContent (PiperOrigin-RevId: 8226921) (c3c2fbba)

• Expose flexible safety filter change, rai_settings in ConversationProfile (PiperOrigin-RevId: 8226921) (c3c2fbba)

• add Agent Assist Generator Evaluation feature (PiperOrigin-RevId: 8226921) (c3c2fbba)

Documentation

• minor formatting (PiperOrigin-RevId: 8230672) (c3c2fbba)

• Updated comments for the SuggestionInput message, documenting how it is used with tools (PiperOrigin-RevId: 8226921) (c3c2fbba)

• update documentation for transcription language code configuration (PiperOrigin-RevId: 8226921) (c3c2fbba)

v2.42.0: google-cloud-dialogflow 2.42.0

2.42.0 (2025-10-16)

v2.41.1

v2.41.0: google-cloud-bigquery-storage: v2.41.0

Features

• add pandas-gbq to optional extras (#​18020) (fe91d93)
• bigquery-storage: add deprecation warning for to_dataframe (#​18022) (57e7822)
• update sources and regenerate (#​18164) (5ff8274)

Bug Fixes

• storage: support updated GapicCallable metadata in tests (#​18031) (24fe2e3)

Documentation

• handwritten: centralize CONTRIBUTING.rst pointers (#​17642) (23b9499)

v2.40.0: google-cloud-bigquery-storage: v2.40.0

Features

• delegate ReadRowsPage.to_arrow to pandas_gbq.arrow (#​17938) (aedc66f)

Bug Fixes

• bump grpcio to 1.59.0; require Python 3.10+ (#​17351) (a53487a)

v2.39.0: google-cloud-bigquery-storage: v2.39.0

v2.39.0 (2026-06-02)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[gemini-code-assist]

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request automates the update of the google-auth Python library to its latest version, 2.49.0, across several project components. This ensures that the application leverages the most current authentication mechanisms, benefiting from recent security patches, performance improvements, and new features provided by the Google Auth library, thereby maintaining compatibility and robustness with Google Cloud services.

Highlights

• Dependency Update: The google-auth Python dependency has been updated across multiple requirements.txt files from various older versions (2.36.0, 2.38.0, 2.42.1) to the latest 2.49.0.
• Enhanced Security and Features: The update brings numerous features and bug fixes, including improved mTLS support, agent identity bound token support, Python 3.14 compatibility, and various authentication flow enhancements, as detailed in the google-auth library's release notes.

Changelog

• google-auth-library
  • Added support for mTLS IAM domain for Certificate based Access and configurable GCE Metadata Server retries (v2.48.0).
  • Dropped cachetools dependency in favor of a simpler local implementation (v2.47.0).
  • Recognized workload certificate configuration for mTLS with Agentic Identities (v2.46.0).
  • Introduced Agent Identity bound token support and handling of certificate mismatches with retries (v2.45.0).
  • Supported Python 3.14, added ecdsa p-384 support, and implemented token revocation in STS client (v2.44.0).
  • Enabled mTLS automatically when MWID/X.509 cert sources are detected and GOOGLE_API_USE_CLIENT_CERTIFICATE is not set (v2.43.0).
  • Added trust boundary support for external accounts, service accounts, and impersonation (v2.42.0, v2.41.0).
  • Included GA support for X.509 workload identity federation (v2.39.0).
  • Introduced domain-wide delegation flow in impersonated credentials (v2.38.0).
  • Allowed users to use JWK keys for verifying ID tokens (v2.37.0).
  • Resolved various bug fixes including circular imports, AWS IMDS request headers, ADC environment variable detection, and Python 3.8 support across versions.

Activity

• This pull request was automatically generated by Renovate Bot to update dependencies.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request updates the google-auth dependency to version 2.49.0. This is a welcome update. However, google-auth version 2.47.0 and later no longer depend on cachetools. This change may leave an orphaned cachetools dependency in some of your requirements.txt files. I've added specific comments with recommendations to regenerate the dependency files or manually clean them up to maintain dependency hygiene.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun