chore(deps): update all dependencies#2418
chore(deps): update all dependencies#2418renovate-bot wants to merge 1 commit intogoogleapis:mainfrom
Conversation
trusted-contributions-gcf
bot
added
the
kokoro:force-run
product-auto-label
bot
added
size: m
yoshi-kokoro
removed
the
kokoro:force-run
Summary of ChangesHello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request systematically updates all project dependencies to their latest stable versions. The primary goal is to enhance stability, incorporate new features, improve performance, and ensure compatibility with newer Python environments, particularly Python 3.14. This comprehensive refresh touches upon core Python utilities, a broad suite of Google Cloud client libraries, and several data science-related packages, including major version upgrades for Highlights
Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates a large number of dependencies across various sample requirements.txt files. While most updates are minor or patch versions, there are several major version bumps that introduce potential risks and breaking changes.
My review has identified the following key issues:
pytest: The update to version9.0.2conflicts with an existing pin (pytest<9) innoxfile.py. I've recommended reverting this change across allrequirements-test.txtfiles as it will likely cause CI failures for unit tests.pandas: The upgrade to version3.0.1is a major change that enables Copy-on-Write by default. This can alter code behavior and requires thorough testing.pycparser: The upgrade to version3.0contains breaking changes and could affectcffi, a transitive dependency. This also warrants careful testing.
I've added specific comments on the relevant files with more details. The major version bumps, especially, should be carefully evaluated and tested before merging.
| google-cloud-testutils==1.6.4 | ||
| pytest==8.4.2 | ||
| google-cloud-testutils==1.7.0 | ||
| pytest==9.0.2 |
There was a problem hiding this comment.
The update of pytest to version 9.0.2 conflicts with a constraint in noxfile.py which explicitly pins pytest<9 for unit tests (line 99). This indicates that the project is not yet ready for pytest 9. Please revert the pytest update to avoid breaking the unit test suite.
pytest==8.4.2
| @@ -1,3 +1,3 @@ | |||
| pytest==8.4.2 | |||
| pytest==9.0.2 | |||
There was a problem hiding this comment.
The update of pytest to version 9.0.2 conflicts with a constraint in noxfile.py which explicitly pins pytest<9 for unit tests (line 99). This indicates that the project is not yet ready for pytest 9. Please revert the pytest update to avoid breaking the unit test suite.
pytest==8.4.2
| google-cloud-testutils==1.6.4 | ||
| pytest==8.4.2 | ||
| google-cloud-testutils==1.7.0 | ||
| pytest==9.0.2 |
There was a problem hiding this comment.
The update of pytest to version 9.0.2 conflicts with a constraint in noxfile.py which explicitly pins pytest<9 for unit tests (line 99). This indicates that the project is not yet ready for pytest 9. Please revert the pytest update to avoid breaking the unit test suite.
pytest==8.4.2
| google-cloud-testutils==1.6.4 | ||
| pytest==8.4.2 | ||
| google-cloud-testutils==1.7.0 | ||
| pytest==9.0.2 |
There was a problem hiding this comment.
The update of pytest to version 9.0.2 conflicts with a constraint in noxfile.py which explicitly pins pytest<9 for unit tests (line 99). This indicates that the project is not yet ready for pytest 9. Please revert the pytest update to avoid breaking the unit test suite.
pytest==8.4.2
| google-cloud-testutils==1.6.4 | ||
| pytest==8.4.2 | ||
| google-cloud-testutils==1.7.0 | ||
| pytest==9.0.2 |
There was a problem hiding this comment.
The update of pytest to version 9.0.2 conflicts with a constraint in noxfile.py which explicitly pins pytest<9 for unit tests (line 99). This indicates that the project is not yet ready for pytest 9. Please revert the pytest update to avoid breaking the unit test suite.
pytest==8.4.2
| proto-plus==1.26.1 | ||
| pyarrow==21.0.0 | ||
| packaging==26.0 | ||
| pandas==3.0.1 |
There was a problem hiding this comment.
The major version update of pandas from 2.x to 3.x introduces significant changes, most notably that Copy-on-Write (CoW) is now enabled by default. This can alter the behavior of chained assignments and potentially introduce subtle bugs. It's highly recommended to thoroughly test the application to ensure compatibility with this change. For more details, see the pandas 3.0.0 release notes.
| pyasn1-modules==0.4.2 | ||
| pycparser==2.23 | ||
| pyparsing==3.2.5 | ||
| pycparser==3.0 |
There was a problem hiding this comment.
The update to pycparser version 3.0 is a major release with breaking changes. As pycparser is a dependency of cffi, which is used in this project, this update could cause issues. This change should be carefully tested to ensure it doesn't introduce any regressions.
| google-cloud-bigquery-storage==2.36.2 | ||
| ipython===8.18.1 | ||
| pandas==2.3.3 | ||
| pandas==3.0.1 |
There was a problem hiding this comment.
The major version update of pandas from 2.x to 3.x introduces significant changes, most notably that Copy-on-Write (CoW) is now enabled by default. This can alter the behavior of chained assignments and potentially introduce subtle bugs. It's highly recommended to thoroughly test the application to ensure compatibility with this change. For more details, see the pandas 3.0.0 release notes.
| matplotlib==3.10.6; python_version >= '3.10' | ||
| pandas==2.3.3 | ||
| matplotlib==3.10.8; python_version >= '3.10' | ||
| pandas==3.0.1 |
There was a problem hiding this comment.
The major version update of pandas from 2.x to 3.x introduces significant changes, most notably that Copy-on-Write (CoW) is now enabled by default. This can alter the behavior of chained assignments and potentially introduce subtle bugs. It's highly recommended to thoroughly test the application to ensure compatibility with this change. For more details, see the pandas 3.0.0 release notes.
3 participants
This PR contains the following updates:
==0.10.3→==0.12.1==0.10.3→==0.12.1==2025.10.5→==2026.2.25==3.4.3→==3.4.4==8.3.0→==8.3.1==1.4.3→==1.5.0==2.25.2→==2.30.0==2.41.1→==2.48.0==1.2.2→==1.3.0==3.38.0→==3.40.1==2.33.1→==2.36.2==2.4.3→==2.5.0==1.6.4→==1.7.0==1.7.1→==1.8.0==2.7.2→==2.8.0==3.38.0→==3.40.1==1.70.0→==1.72.0==1.75.1→==1.78.0==3.10→==3.11==9.6.0→==9.10.0==3.10.6→==3.10.8==25.0→==26.0==2.3.3→==3.0.1==1.26.1→==1.27.1==21.0.0→==23.0.1==2.23→==3.0==3.2.5→==3.3.2==8.4.2→==9.0.2Release Notes
googleapis/python-bigquery-magics (bigquery-magics)
v0.12.1Compare Source
Bug Fixes
v0.12.0Compare Source
Features
Bug Fixes
v0.11.0Compare Source
Features
certifi/python-certifi (certifi)
v2026.2.25Compare Source
v2026.1.4Compare Source
v2025.11.12Compare Source
jawah/charset_normalizer (charset-normalizer)
v3.4.4Compare Source
Changed
setuptoolsto a specific constraintsetuptools>=68,<=81.Removed
setuptools-scmas a build dependency.Misc
dev-requirements.txtand createdci-requirements.txtfor security purposes.multiple.intoto.jsonlin GitHub releases in addition to individual attestation file per wheel.pallets/click (click)
v8.3.1Compare Source
Released 2025-11-15
subprocess.Popen. :issue:3039:pr:
3055Sentinel.UNSETdefault values byNoneas they're passed throughthe
Context.invoke()method. :issue:3066:issue:3065:pr:3068Sentinel.UNSEThappening too early, which caused incorrectbehavior for multiple parameters using the same name. :issue:
3071:pr:3079Sentinel.UNSETvalues asNonewhen looking up for other parametersthrough the context inside parameter callbacks. :issue:
3136:pr:3137promptandconfirmparameterprompt_suffixisempty. :issue:
3019:pr:3021Sentinel.UNSETis found during parsing, it will skip calls totype_cast_value. :issue:3069:pr:3090googleapis/python-db-dtypes-pandas (db-dtypes)
v1.5.0Compare Source
Features
v1.4.4Compare Source
Dependencies
googleapis/google-cloud-python (google-api-core)
v2.30.0: google-api-core: v2.30.0Bug Fixes
v2.29.0v2.28.1v2.28.0v2.27.0: google-cloud-texttospeech: v2.27.0Features
v2.26.0: google-cloud-secret-manager 2.26.0Features
check Python and dependency versions in generated GAPICs (PiperOrigin-RevId:
8454486) (d2b35b25)auto-enable mTLS when supported certificates are detected (PiperOrigin-RevId:
8454486) (d2b35b25)googleapis/google-auth-library-python (google-auth)
v2.48.0Compare Source
Features
NO_GCE_CHECKenvironment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)Bug Fixes
content-headerfrom AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)user_verification=preferredfor ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)v2.47.0Compare Source
Features
cachetoolsdependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)Bug Fixes
v2.46.0Compare Source
Documentation
Features
Bug Fixes
v2.45.0Compare Source
Features
v2.44.0Compare Source
Features
Bug Fixes
v2.43.0Compare Source
Features
GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
sources detected. Also, fix check_use_client_cert to return boolean
value.
Change #1848 added the check_use_client_cert method that helps know if
client cert should be used for mTLS connection. However, that was in a
private class, thus, created a public wrapper of the same function so
that it can be used by python Client Libraries. Also, updated
check_use_client_cert to return a boolean value instead of existing
string value for better readability and future scope.
--------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
(either true or false), the SDK will respect that setting. This is
necessary for test scenarios and users who need to explicitly control
mTLS behavior.
set, the SDK will automatically enable mTLS only if it detects Managed
Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
certificate sources. In other cases where the variable is not set, mTLS
will remain disabled.
** This change also adds the helper method
check_use_client_certandit's unit test, which will be used for checking the criteria for setting
the mTLS to true
** This change is only for Auth-Library, other changes will be created
for Client-Library use-cases.
--------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)
google-authto librarian (#1838) This PR onboardsgoogle-authlibrary to the Librarian system.Wait for
#1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)
v2.42.1Compare Source
Bug Fixes
v2.42.0Compare Source
Features
Bug Fixes
googleapis/python-bigquery (google-cloud-bigquery)
v3.40.1Compare Source
Documentation
Bug Fixes
v3.40.0Compare Source
Features
v3.39.0Compare Source
Documentation
Features
Bug Fixes
io.Basein thePathType(#2323) (b11e09cb6ee32e451b37eda66bece2220b9ceaba)retryinjob.result()(#2302) (e118b029bbc89a5adbab83f39858c356c23665bf)googleapis/python-cloud-core (google-cloud-core)
v2.5.0Compare Source
Features
Bug Fixes
googleapis/python-test-utils (google-cloud-testutils)
v1.7.0Compare Source
Features
googleapis/python-crc32c (google-crc32c)
v1.8.0Compare Source
Features
Bug Fixes
googleapis/google-resumable-media-python (google-resumable-media)
v2.8.0Compare Source
Features
Bug Fixes
grpc/grpc (grpcio)
v1.78.0Compare Source
This is release 1.78.0 (gutsy) of gRPC Core.
For gRPC documentation, see grpc.io. For previous releases, see Releases.
This release contains refinements, improvements, and bug fixes, with highlights listed below.
C++
Objective-C
Python
asyncio.run()to hang forever during the shutdown process. (#40989)Ruby
v1.76.0Compare Source
This is release 1.76.0 (genuine) of gRPC Core.
For gRPC documentation, see grpc.io. For previous releases, see Releases.
This release contains refinements, improvements, and bug fixes, with highlights listed below.
Core
C#
Python
kjd/idna (idna)
v3.11Compare Source
ipython/ipython (ipython)
v9.10.0Compare Source
v9.9.0Compare Source
v9.8.0Compare Source
v9.7.0Compare Source
matplotlib/matplotlib (matplotlib)
v3.10.8: REL: v3.10.8Compare Source
This is a bugfix release in the 3.10.x series.
The primary highlights of this release are:
v3.10.7: REL: v3.10.7Compare Source
This is the latest bugfix release in the 3.10.x series.
The most important update in this release is that the minimum version
of
pyparsinghas been updated to version 3.0.pypa/packaging (packaging)
v26.0Compare Source
Read about the performance improvements here: https://iscinumpy.dev/post/packaging-faster.
What's Changed
Features:
__replace__forVersionby @henryiii in #1003VersionandSpecifierby @henryiii in #1004Behavior adaptations:
Specifier.contains,SpecifierSet.contains, andSpecifierSet.filterby @notatallshaw in #897SpecifierSet.filterby @notatallshaw in #942SpecifierSetby @notatallshaw in #951Falseinstead of raising for.containswith invalid version by @Liam-DeVoe in #932SpecifierandSpecifierSet'sfilterandcontainsmethod. by @notatallshaw in #954Versionon certain marker keys, returnFalseon unequal ordered comparsions by @JP-Ellis in #939Fixes:
_hashwhen unpicklingTag()by @dholth in #860Specifier.prereleasesby @notatallshaw in #896_GLibCVersionNamedTuplein_manylinuxby @cthoyt in #868()by @bwoodsend in #879'name'format by @di in #925Requirementsstring by @henryiii in #953packaginglogger instead by @henryiii in #965MarkerandRequirementby @henryiii in #1022Markerfails to construct by @henryiii in #1033Performance:
_manylinux.pyby @cthoyt in #869Versionby @bearomorphism in #913Versions in specifier comparison by @notatallshaw in #986Specifier's Version by @notatallshaw in #985Versiona little faster by @henryiii in #987Versionregex cleanup by @henryiii in #990_keyinVersionby @notatallshaw in #989 and regression forpackaging_legacyfixed by @henryiii in #1048canonicalize_versionby @henryiii in #993fullmatchin a couple more places by @henryiii in #992fullmatchfor markers too by @henryiii in #1029mapinstead of generator by @henryiii in #996._version(_Version, aNamedTuple) by @henryiii in #995 and #1062Versioncreation incanonicalize_versionby @henryiii in #994__slots__toVersionby @henryiii in #1001__slots__toSpecifiers by @henryiii in #1002__slots__toNodes by @henryiii in #1032version.__replace__in specifier comparison by @notatallshaw in #999_get_spec_versionin more places inSpecifierby @notatallshaw in #1005setconstruction out of function by @henryiii in #1012Version.__str__by about 10% by @henryiii in #997canonicalize_nameby avoiding a regex by @henryiii in #1030, #1047, and #1064Type annotations:
parse_wheel_filenamedocs by @ncoghlan in #973_versionin.version.Versionby @brettcannon in #927specifier.pyby @subhajitsaha01 in #930Internal:
license-filesby @DimitriPapadopoulos in #924python_versionby @trim21 inConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.