chore(deps): update python non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
cachetools	==6.2.0 -> ==6.2.4
certifi	==2025.10.5 -> ==2025.11.12
click (changelog)	==8.3.0 -> ==8.3.1
colorlog	==6.9.0 -> ==6.10.1
google-api-core	==2.25.2 -> ==2.28.1
google-auth	==2.41.1 -> ==2.45.0
google-cloud-core	==2.4.3 -> ==2.5.0
google-cloud-storage	==3.4.1 -> ==3.7.0
google-crc32c	==1.7.1 -> ==1.8.0
google-resumable-media	==2.7.2 -> ==2.8.0
googleapis-common-protos (source)	==1.70.0 -> ==1.72.0
idna (changelog)	==3.10 -> ==3.11
proto-plus	==1.26.1 -> ==1.27.0
protobuf	==6.32.1 -> ==6.33.2
urllib3 (changelog)	==2.6.0 -> ==2.6.2

---

Release Notes

certifi/python-certifi (certifi)

v2025.11.12

Compare Source

pallets/click (click)

v8.3.1

Compare Source

Released 2025-11-15

• Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
  :pr:3055
• Replace Sentinel.UNSET default values by None as they're passed through
  the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
• Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
  behavior for multiple parameters using the same name. :issue:3071 :pr:3079
• Hide Sentinel.UNSET values as None when looking up for other parameters
  through the context inside parameter callbacks. :issue:3136 :pr:3137
• Fix rendering when prompt and confirm parameter prompt_suffix is
  empty. :issue:3019 :pr:3021
• When Sentinel.UNSET is found during parsing, it will skip calls to
  type_cast_value. :issue:3069 :pr:3090

borntyping/python-colorlog (colorlog)

v6.10.1

Compare Source

What's Changed

• When logging exceptions, enable colorized traceback by @​garyvdm in #​138

Full Changelog: borntyping/python-colorlog@v6.9.0...v6.10.1

googleapis/python-api-core (google-api-core)

v2.28.1

Compare Source

Bug Fixes

• Remove dependency on packaging and pkg_resources (#​852) (ca59a86)

v2.28.0

Compare Source

Features

• Provide and use Python version support check (#​832) (d36e896)

v2.27.0

Compare Source

Features

• Support for async bidi streaming apis (#​836) (9530548)

v2.26.0

Compare Source

Features

• Add trove classifier for Python 3.14 (#​842) (43690de)

googleapis/google-auth-library-python (google-auth)

v2.45.0

Compare Source

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#​1890) (b32c934e6b0d09b94c467cd432a0a635e8b05f5c)

v2.44.0

Compare Source

Features

• support Python 3.14 (#​1822) (0f7097e78f247665b6ef0287d482033f7be2ed6d)
• add ecdsa p-384 support (#​1872) (39c381a5f6881b590025f36d333d12eff8dc60fc)
• MDS connections use mTLS (#​1856) (0387bb95713653d47e846cad3a010eb55ef2db4c)
• Implement token revocation in STS client and add revoke() metho… (#​1849) (d5638986ca03ee95bfffa9ad821124ed7e903e63)
• Add shlex to correctly parse executable commands with spaces (#​1855) (cf6fc3cced78bc1362a7fe596c32ebc9ce03c26b)

Bug Fixes

• Use public refresh method for source credentials in ImpersonatedCredentials (#​1884) (e0c3296f471747258f6d98d2d9bfde636358ecde)
• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#​1880) (78de7907b8bdb7b5510e3c6fa8a3f3721e2436d7)
• Delegate workload cert and key default lookup to helper function (#​1877) (b0993c7edaba505d0fb0628af28760c43034c959)

v2.43.0

Compare Source

Features

• Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#​1859) Add public wrapper for check_use_client_cert which enables mTLS if
  GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
  sources detected. Also, fix check_use_client_cert to return boolean
  value.
  Change #​1848 added the check_use_client_cert method that helps know if
  client cert should be used for mTLS connection. However, that was in a
  private class, thus, created a public wrapper of the same function so
  that it can be used by python Client Libraries. Also, updated
  check_use_client_cert to return a boolean value instead of existing
  string value for better readability and future scope.
  --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
• Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#​1848) The Python SDK will use a hybrid approach for mTLS enablement:

• If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set
  (either true or false), the SDK will respect that setting. This is
  necessary for test scenarios and users who need to explicitly control
  mTLS behavior.
• If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not
  set, the SDK will automatically enable mTLS only if it detects Managed
  Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
  certificate sources. In other cases where the variable is not set, mTLS
  will remain disabled.
  ** This change also adds the helper method check_use_client_cert and
  it's unit test, which will be used for checking the criteria for setting
  the mTLS to true
  ** This change is only for Auth-Library, other changes will be created
  for Client-Library use-cases.
  --------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)

• onboard google-auth to librarian (#​1838) This PR onboards google-auth library to the Librarian system.
  Wait for
  #​1819. (c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca)

v2.42.1

Compare Source

Bug Fixes

• Catch ValueError for json.loads() (#​1842) (b074cad)

v2.42.0

Compare Source

Features

• Add trust boundary support for external accounts. (#​1809) (36ecb1d)

Bug Fixes

• Read scopes from ADC json for impersoanted cred (#​1820) (62c0fc8)

googleapis/python-cloud-core (google-cloud-core)

v2.5.0

Compare Source

Features

• Add Python 3.14 support (#​333) (c26e587)

Bug Fixes

• Remove setup.cfg configuration for creating universal wheels (#​332) (78ce8a6)
• Resolve issue where pre-release versions of dependencies are installed (#​329) (ab9785d)

googleapis/python-storage (google-cloud-storage)

v3.7.0

Compare Source

Features

• Auto enable mTLS when supported certificates are detected (#​1637) (4e91c54)
• Send entire object checksum in the final api call of resumable upload (#​1654) (ddce7e5)
• Support urllib3 >= 2.6.0 (#​1658) (57405e9)

Bug Fixes

• Fix for move_blob failure when the new blob name contains characters that need to be url encoded (#​1605) (ec470a2)

v3.6.0

Compare Source

Features

• Add support for partial list buckets (#​1606) (92fc2b0)
• Make return_partial_success and unreachable fields public for list Bucket (#​1601) (323cddd)
• zb-experimental: Add async write object stream (5ab8103)
• zb-experimental: Add async write object stream (#​1612) (5ab8103)

Bug Fixes

• Dont pass credentials to StorageClient (#​1608) (195d644)

v3.5.0

Compare Source

Features

• experimental: Add base resumption strategy for bidi streams (#​1594) (5fb85ea)
• experimental: Add checksum for bidi reads operation (#​1566) (93ce515)
• experimental: Add read resumption strategy (#​1599) (5d5e895)
• experimental: Handle BidiReadObjectRedirectedError for bidi reads (#​1600) (71b0f8a)
• Indicate that md5 is used as a CRC (#​1522) (961536c)
• Provide option to update user_agent (#​1596) (02f1451)

Bug Fixes

• Deprecate credentials_file argument (74415a2)
• Flaky system tests for resumable_media (#​1592) (7fee3dd)
• Make download_ranges compatible with asyncio.create_task(..) (#​1591) (faf8b83)
• Make download_ranges compatible with asyncio.create_task(..) (#​1591) (faf8b83)
• Redact sensitive data from OTEL traces and fix env var parsing (#​1553) (a38ca19)
• Redact sensitive data from OTEL traces and fix env var parsing (#​1553) (a38ca19)
• Use separate header object for each upload in Transfer Manager MPU (#​1595) (0d867bd)

googleapis/python-crc32c (google-crc32c)

v1.8.0

Compare Source

Features

• Add support for Python 3.14 (d3118d9)
• Support Python 3.14 (#​315) (49d0a36)

Bug Fixes

• Update toml file with setup.cfg content (#​319) (42e5268)

googleapis/google-resumable-media-python (google-resumable-media)

v2.8.0

Compare Source

Features

• Add support for Python 3.13 and 3.14 (#​485) (9937233ded26924179d717b69df7c76c93f8c133)

Bug Fixes

• remove setup.cfg configuration for creating universal wheels (#​484) (75dbecf8d140483da27dffc970e2e87338e71432)
• resolve issue where pre-release versions of dependencies are installed (#​481) (23dafcf3f216a090a0d0c6941048c7da13cbe496)

googleapis/google-cloud-python (googleapis-common-protos)

v1.72.0: googleapis-common-protos 1.72.0

Compare Source

Features

• add common_resources.proto (#​14851) (e4e0e2a9)

• add field api_version to message ServiceForTransport (#​14843) (81812fde)

v1.71.0: googleapis-common-protos 1.71.0

Compare Source

Features

• add support for Python 3.14 (#​14699) (8b69540b)

kjd/idna (idna)

v3.11

Compare Source

googleapis/proto-plus-python (proto-plus)

v1.27.0

Compare Source

Features

• Add classifier for Python 3.14 (#​544) (d9f41512648c4551fc3e926649864c5dfe3964b2)

urllib3/urllib3 (urllib3)

v2.6.2

Compare Source

==================

• Fixed HTTPResponse.read_chunked() to properly handle leftover data in
  the decoder's buffer when reading compressed chunked responses.
  (#&#8203;3734 <https://github.com/urllib3/urllib3/issues/3734>__)

v2.6.1

Compare Source

==================

• Restore previously removed HTTPResponse.getheaders() and
  HTTPResponse.getheader() methods.
  (#&#8203;3731 <https://github.com/urllib3/urllib3/issues/3731>__)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.