chore(deps): update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
charset-normalizer (changelog)	==3.4.3 -> ==3.4.4
google-api-core	==2.25.2 -> ==2.28.1
google-auth	==2.41.1 -> ==2.43.0
google-auth-oauthlib	==1.2.2 -> ==1.2.3
google-cloud-bigquery-storage (source)	==2.33.1 -> ==2.34.0
google-cloud-core	==2.4.3 -> ==2.5.0
google-cloud-testutils	==1.6.4 -> ==1.7.0
googleapis-common-protos (source)	==1.70.0 -> ==1.72.0
grpcio (source)	==1.75.1 -> ==1.76.0
idna (changelog)	==3.10 -> ==3.11
ipython	==9.6.0 -> ==9.7.0
matplotlib	==3.10.6 -> ==3.10.7
pyarrow	==21.0.0 -> ==22.0.0

---

Release Notes

jawah/charset_normalizer (charset-normalizer)

v3.4.4

Compare Source

Changed

• Bound setuptools to a specific constraint setuptools>=68,<=81.
• Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

• setuptools-scm as a build dependency.

Misc

• Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
• Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
• Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

googleapis/python-api-core (google-api-core)

v2.28.1

Compare Source

Bug Fixes

• Remove dependency on packaging and pkg_resources (#​852) (ca59a86)

v2.28.0

Compare Source

Features

• Provide and use Python version support check (#​832) (d36e896)

v2.27.0

Compare Source

Features

• Support for async bidi streaming apis (#​836) (9530548)

v2.26.0

Compare Source

Features

• Add trove classifier for Python 3.14 (#​842) (43690de)

googleapis/google-auth-library-python (google-auth)

v2.43.0

Compare Source

Features

• Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#​1859) Add public wrapper for check_use_client_cert which enables mTLS if
  GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
  sources detected. Also, fix check_use_client_cert to return boolean
  value.
  Change #​1848 added the check_use_client_cert method that helps know if
  client cert should be used for mTLS connection. However, that was in a
  private class, thus, created a public wrapper of the same function so
  that it can be used by python Client Libraries. Also, updated
  check_use_client_cert to return a boolean value instead of existing
  string value for better readability and future scope.
  --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
• Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#​1848) The Python SDK will use a hybrid approach for mTLS enablement:

• If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set
  (either true or false), the SDK will respect that setting. This is
  necessary for test scenarios and users who need to explicitly control
  mTLS behavior.
• If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not
  set, the SDK will automatically enable mTLS only if it detects Managed
  Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
  certificate sources. In other cases where the variable is not set, mTLS
  will remain disabled.
  ** This change also adds the helper method check_use_client_cert and
  it's unit test, which will be used for checking the criteria for setting
  the mTLS to true
  ** This change is only for Auth-Library, other changes will be created
  for Client-Library use-cases.
  --------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)

• onboard google-auth to librarian (#​1838) This PR onboards google-auth library to the Librarian system.
  Wait for
  #​1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)

v2.42.1

Compare Source

Bug Fixes

• Catch ValueError for json.loads() (#​1842) (b074cad)

v2.42.0

Compare Source

Features

• Add trust boundary support for external accounts. (#​1809) (36ecb1d)

Bug Fixes

• Read scopes from ADC json for impersoanted cred (#​1820) (62c0fc8)

GoogleCloudPlatform/google-auth-library-python-oauthlib (google-auth-oauthlib)

v1.2.3

Compare Source

Bug Fixes

• Add upper-bound to google-auth dependency (#​423) (d7921f9)
• Drop support for Python 3.6 (4b1a5f3)
• Explicitly declare Python 3.13 support (4b1a5f3)

googleapis/google-cloud-python (google-cloud-bigquery-storage)

v2.34.0: google-cloud-bigquery-storage 2.34.0

Compare Source

Features

• Add support for Python 3.14 (bd0f5422)

Bug Fixes

• Deprecate credentials_file argument (bd0f5422)

• Require grpcio >= 1.33.2 (bd0f5422)

• Require grpcio >= 1.75.1 for Python 3.14 (bd0f5422)

googleapis/python-cloud-core (google-cloud-core)

v2.5.0

Compare Source

Features

• Add Python 3.14 support (#​333) (c26e587)

Bug Fixes

• Remove setup.cfg configuration for creating universal wheels (#​332) (78ce8a6)
• Resolve issue where pre-release versions of dependencies are installed (#​329) (ab9785d)

googleapis/python-test-utils (google-cloud-testutils)

v1.7.0

Compare Source

Features

• Add Python 3.14 support (#​284) (3cb8491)

grpc/grpc (grpcio)

v1.76.0

Compare Source

This is release 1.76.0 (genuine) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• Prioritize system CA over bundled CA. (#​40583)
• [event_engine] Introduce a event_engine_poller_for_python experiment. (#​40243)
• [metrics] add grpc.lb.backend_service label. (#​40486)

C#

• [csharp tools] #​39374 Grpc.Tools can't process file Suffix name with Upper character. (#​40072)

Python

• [Python] gRPC AsyncIO: Improve CompletionQueue polling performance. (#​39993)

kjd/idna (idna)

v3.11

Compare Source

ipython/ipython (ipython)

v9.7.0

Compare Source

matplotlib/matplotlib (matplotlib)

v3.10.7: REL: v3.10.7

Compare Source

This is the latest bugfix release in the 3.10.x series.

The most important update in this release is that the minimum version
of pyparsing has been updated to version 3.0.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.