chore(deps): refresh pip-compile outputs python

[renovate-bot]

This PR contains the following updates:

Package	Update	Change	Pending	Age	Adoption	Passing	Confidence
	lockFileMaintenance	All locks refreshed
bcrypt	minor	==4.2.0 -> ==4.3.0
bleach	minor	==6.1.0 -> ==6.2.0
cachetools	patch	==5.5.0 -> ==5.5.2
certifi	minor	==2024.8.30 -> ==2024.12.14
click (changelog)	patch	==8.1.7 -> ==8.1.8
cryptography (changelog)	patch	==44.0.1 -> ==44.0.2
flask (changelog)	minor	==3.0.3 -> ==3.1.0
google-api-core	minor	==2.20.0 -> ==2.24.2
google-auth	minor	==2.35.0 -> ==2.38.0
google-cloud-core	patch	==2.4.1 -> ==2.4.3
google-cloud-trace (source)	minor	==1.13.5 -> ==1.16.1
googleapis-common-protos (source)	minor	==1.65.0 -> ==1.69.2
grpcio (source)	minor	==1.66.1 -> ==1.71.0
locust	minor	==2.31.7 -> ==2.33.2
more-itertools	minor	==10.5.0 -> ==10.6.0
opentelemetry-exporter-gcp-trace (source)	minor	==1.7.0 -> ==1.9.0
opentelemetry-instrumentation-flask	minor	==0.48b0 -> ==0.52b1
opentelemetry-instrumentation-jinja2	minor	==0.48b0 -> ==0.52b1
opentelemetry-instrumentation-requests	minor	==0.48b0 -> ==0.52b1
opentelemetry-instrumentation-sqlalchemy	minor	==0.48b0 -> ==0.52b1
opentelemetry-propagator-gcp (source)	minor	==1.7.0 -> ==1.9.0
opentelemetry-sdk	minor	==1.27.0 -> ==1.31.1
protobuf	patch	==4.25.5 -> ==4.25.6
psycopg2-binary (source, changelog)	patch	==2.9.9 -> ==2.9.10
pycryptodome (source, changelog)	minor	==3.20.0 -> ==3.22.0
pyjwt	minor	==2.9.0 -> ==2.10.1
pyparsing	minor	==3.1.4 -> ==3.2.2	3.2.3
six	minor	==1.16.0 -> ==1.17.0
urllib3 (changelog)	minor	==2.2.3 -> ==2.3.0
wrapt (changelog)	minor	==1.16.0 -> ==1.17.2
zipp	minor	==3.20.2 -> ==3.21.0

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

mozilla/bleach (bleach)

v6.2.0

Compare Source

Backwards incompatible changes

• Dropped support for Python 3.8. (#​737)

Security fixes

None

Bug fixes

• Add support for Python 3.13. (#​736)
• Remove six depdenncy. (#​618)
• Update known-good versions for tinycss2. (#​732)
• Fix additional < followed by characters and EOF issues. (#​728)

tkem/cachetools (cachetools)

v5.5.2

Compare Source

===================

• Reduce number of @cached lock/unlock operations.

• Improve documentation.

• Update CI environment.

v5.5.1

Compare Source

===================

• Add documentation regarding caching of exceptions.

• Officially support Python 3.13.

• Update CI environment.

certifi/python-certifi (certifi)

v2024.12.14

Compare Source

pallets/click (click)

v8.1.8

Compare Source

Unreleased

• Fix an issue with type hints for click.open_file(). :issue:2717
• Fix issue where error message for invalid click.Path displays on
  multiple lines. :issue:2697
• Fixed issue that prevented a default value of "" from being displayed in
  the help for an option. :issue:2500
• The test runner handles stripping color consistently on Windows.
  :issue:2705
• Show correct value for flag default when using default_map.
  :issue:2632
• Fix click.echo(color=...) passing color to coloroma so it can be
  forced on Windows. :issue:2606.

pyca/cryptography (cryptography)

v44.0.2

Compare Source

pallets/flask (flask)

v3.1.0

Compare Source

Released 2024-11-13

• Drop support for Python 3.8. :pr:5623
• Update minimum dependency versions to latest feature releases.
  Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
• Provide a configuration option to control automatic option
  responses. :pr:5496
• Flask.open_resource/open_instance_resource and
  Blueprint.open_resource take an encoding parameter to use when
  opening in text mode. It defaults to utf-8. :issue:5504
• Request.max_content_length can be customized per-request instead of only
  through the MAX_CONTENT_LENGTH config. Added
  MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation
  about resource limits to the security page. :issue:5625
• Add support for the Partitioned cookie attribute (CHIPS), with the
  SESSION_COOKIE_PARTITIONED config. :issue:5472
• -e path takes precedence over default .env and .flaskenv files.
  load_dotenv loads default files in addition to a path unless
  load_defaults=False is passed. :issue:5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old
  secret keys that can still be used for unsigning. Extensions will need to
  add support. :issue:5621
• Fix how setting host_matching=True or subdomain_matching=False
  interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts
  requests to only that domain. :issue:5553
• Request.trusted_hosts is checked during routing, and can be set through
  the TRUSTED_HOSTS config. :issue:5636

googleapis/python-api-core (google-api-core)

v2.24.2

Compare Source

Bug Fixes

• deps: Allow protobuf 6.x (#​804) (687be7c)

v2.24.1

Compare Source

Bug Fixes

• Memory leak in bidi classes (#​770) (c1b8afa)
• Resolve the issue where rpc timeout of 0 is used when timeout expires (#​776) (a5604a5)

Documentation

• Add warnings regarding consuming externally sourced credentials (#​783) (0ec1825)

v2.24.0

Compare Source

Features

• Add automatic logging config to support debug logging (#​754) (d18d9b5)
• Update recognized logging fields (#​766) (5f80f77)

v2.23.0

Compare Source

Features

• Migrate to pyproject.toml (#​736) (159e9a4)

v2.22.0

Compare Source

Features

• Add support for python 3.13 (#​696) (46b3d3a)

Bug Fixes

• Add type hints to ClientOptions (#​735) (b91ed19)
• Improve Any decode error (#​712) (0d5ed37)
• Require proto-plus >= 1.25.0 for Python 3.13 (#​740) (a26313e)
• Switch to unittest.mock from mock (#​713) (8c53381)

v2.21.0

Compare Source

Features

• Add support for asynchronous long running operations (#​724) (aaed69b)

Bug Fixes

• Set chunk size for async stream content (#​702) (45b8a6d)

googleapis/google-auth-library-python (google-auth)

v2.38.0

Compare Source

Features

• Adding domain-wide delegation flow in impersonated credential (#​1624) (34ee3fe)

Documentation

• Add warnings regarding consuming externally sourced credentials (d049370)

v2.37.0

Compare Source

Features

• Allow users to use jwk keys for verifying ID token (#​1641) (98c3ed9)

v2.36.0

Compare Source

Features

• IAM signblob retries (#​1600) (484c8db)
• Making iam endpoint universe-aware (#​1604) (16c728d)
• Support External Account Authorized User as a Source Credential for impersonated credentials in ADC (#​1608) (875796c)

Bug Fixes

• Adding default parameters to updated interfaces (#​1622) (8cf1cb1)
• Change universe_domain to universe-domain (#​1613) (168fcc6)
• Remove base class to avoid type conflict (#​1619) (9e2789a)
• Revert templates for iam endpoints (#​1614) (0a4363a)
• Update secret (#​1611) (f070de0)
• Update secret (#​1617) (10f42a7)
• Update secret (#​1621) (6be19fb)

googleapis/python-cloud-core (google-cloud-core)

v2.4.3

Compare Source

Bug Fixes

• Declare support for Python 3.13 (#​326) (da34f8a)

v2.4.2

Compare Source

Features

• Client should pass client_options.api_key to auth library (#​321) (dfac15b)

googleapis/google-cloud-python (google-cloud-trace)

v1.16.1: google-cloud-trace: v1.16.1

Compare Source

Bug Fixes

• [Many APIs] Allow Protobuf 6.x (4757dae)
• remove setup.cfg configuration for creating universal wheels (#​13659) (59bfd42)

v1.16.0: google-cloud-trace: v1.16.0

Compare Source

Features

• Add REST Interceptors which support reading metadata (5cdcc9d)
• Add support for reading selective GAPIC generation methods from service YAML (5cdcc9d)

v1.15.0: google-cloud-trace: v1.15.0

Compare Source

Features

• Add support for opt-in debug logging (cf4d0e0)

Bug Fixes

• Fix typing issue with gRPC metadata when key ends in -bin (cf4d0e0)

v1.14.1: google-cloud-workflows: v1.14.1

Compare Source

Bug Fixes

• Add google-auth as a direct dependency (e16032f)
• Add staticmethod decorator to _get_client_cert_source and _get_api_endpoint (e16032f)
• Resolve AttributeError 'Credentials' object has no attribute 'universe_domain' (e16032f)

v1.14.0: google-cloud-trace: v1.14.0

Compare Source

Features

• Add support for Python 3.13 (#​13210) (0b62ac6)

googleapis/google-cloud-python (googleapis-common-protos)

v1.69.2

Compare Source

Bug Fixes

• Allow protobuf 6.x (b4d4551)
• remove setup.cfg configuration for creating universal wheels (#​13659) (59bfd42)
• resolve issue where pre-release versions of dependencies are installed (b4d4551)
• set include in tool.setuptools.packages.find (#​13662) (c6a1588)

v1.69.1

Compare Source

Bug Fixes

• exclude docs in tool.setuptools.packages.find (#​13607) (1e4de9d)
• restore *.proto files removed in version 1.67.0 (#​13614) (323a503)

v1.69.0

Compare Source

Features

• migrate to pyproject.toml (#​13551) (7dda4d0)

v1.68.0

Compare Source

Features

• A new field unversioned_package_disabled is added to message .google.api.PythonSettings (eb554e8)
• Add field experimental_features to message PythonSettings (#​249) (ba8d36e)
• add FieldInfo.referenced_types for generics (#​247) (c91900a)
• add support for field generate_omitted_as_internal in selective gapic generation (#​13482) (993ff4d)

Documentation

• A comment for field content in message .google.api.Page is changed (eb554e8)
• A comment for message RoutingRule is changed (eb554e8)

v1.67.0

Compare Source

Features

• A new field unversioned_package_disabled is added to message .google.api.PythonSettings (eb554e8)
• add support for field generate_omitted_as_internal in selective gapic generation (#​13482) (993ff4d)

Documentation

• A comment for field content in message .google.api.Page is changed (eb554e8)
• A comment for message RoutingRule is changed (eb554e8)

v1.66.0

Features

• Add MISSING_ORIGIN and OVERLOADED_CREDENTIALS to ErrorReason enum (d0478d8)
• Add field protobuf_pythonic_types_enabled to ExperimentalFeatures message (d0478d8)
• Add field selective_gapic_generation to CommonLanguageSettings message (d0478d8)
• Add field time_series_resource_hierarchy_level to MetricDescriptorMetadata message (d0478d8)
• Add message SelectiveGapicGeneration (d0478d8)

grpc/grpc (grpcio)

v1.71.0

Compare Source

This is release gRPC Core 1.71.0 (gears).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Core

• [CallAttemptTracer] Fix call attempt tracer lifetimes for retries (#​38729). (#​38796)
• [pick_first] fix bug that caused us to stop triggering connection attempts. (#​38714)
• [CodeGen][CPP] Added support for service "deprecated" option. (#​38493)
• [EventEngine] Add SetDefaultEventEngine API (and friends). (#​38316)

C++

• [build] Restrict grpc++_public_hdrs target to internal visibility. (#​38646)
• [Doc] Added C++17 cmake option. (#​38432)

Python

• [CI] Drop Python 3.8. (#​38747)
• [Python] Support musl-linux binary wheels on arm64. (#​38223)

Ruby

• [ruby] Build/test ruby 3.4 and build native gems with Ruby 3.4 support. (#​38338)

v1.70.0

Compare Source

This is release 1.70.0 (genius) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [BoringSSL] Update third_party/boringssl-with-bazel. (#​38274)

C++

• gRPC C++ begins to require C++17 or later to build and use gRPC C++. You may need the following settings:
  • CMake: Add CMAKE_CXX_STANDARD=17 to your CMake build command.
  • Bazel: Add --cxxopt='/std:c++17' and --host_cxxopt='/std:c++17' to your Bazel build command.
  • gRPC 1.69, the final version compatible with C++14, will be supported until December 10, 2025, according to https://github.com/grpc/proposal/blob/master/L120-requiring-cpp17.md.

v1.69.0

Compare Source

This is release 1.69.0 (gridiron) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Alarm] Fix Alarm reuse on cancellation. (#​38114)
• [xDS RBAC] Support string_match in HeaderMatcher. (#​38185)
• [pick_first] fix shutdown bug in new PF impl. (#​38144)
• [c-ares] Fix inverted length check in GrpcPolledFdWindows. (#​38101)
• [RetryFilter] Copy the SliceBuffer from RetryFilter's cache to batch payload. (#​38069)
• [EventEngine] Add stronger wording on Endpoint::Read contract. (#​38036)
• [chttp2] Fix channelz address. (#​38022)
• [XdsClient] Add missing authority to XdsClient metrics scope. (#​38009)
• [EventEngine] API contract: Endpoint::Read will provide either an error or data, but never both. (#​38019)
• [Build] Dropped Bazel 6.x support. (#​37979)

Python

• [Build] Override MACOSX_DEPLOYMENT_TARGET for gRPC Python. (#​37997)

v1.68.1

Compare Source

This is release 1.68.1 (groovy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [xDS RBAC] Support string_match in HeaderMatcher (#​38185). (#​38198)

v1.68.0

Compare Source

This is release 1.68.0 (groovy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [XdsClient][Backport] Add missing authority to XdsClient metrics scope (#​38009). (#​38023)
• [Release] Bump core version in preparation for 1.68 Branch Cut. (#​37941)
• [ConfigFetcher] Set HTTP2 error to NO_ERROR to do graceful GOAWAYs. (#​37939)
• [ruby] reduce INFO log for server CQ pluck registration to DEBUG. (#​37633)
• [EventEngine] Enable the PosixEventEngine client experiment. (#​35985)
• [chttp2_server] Fix race between connection starting and it being orphaned. (#​37683)
• [Chttp2Server] Fix race between connection manager updates and handshake. (#​37772)
• [xds] Fix XdsClient race between ResourceDoesNotExist timer and receiving resources. (#​37678)

C++

• [Build] Minimum version of MSVC is now 2022. (#​37687)
• [Build] Bumped the minimum version of cmake. (#​37702)

Python

• Add templating and support for Python 3.13. (#​37643)

v1.67.1

Compare Source

This is release gRPC Core 1.67.1 (gesundheit). This is a Python-only patch release.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

v1.67.0

Compare Source

This is release 1.67.0 (gesundheit) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [ruby] reduce an INFO log to DEBUG (backporthttps://github.com/grpc/grpc/pull/376333). (#​37686)
• [release] Bump core version to 44.0.0. (#​37661)
• [RlsLB] Fix Deadlock. (#​37459)
• [Python Otel] Manage call tracer life cycle use call arena. (#​37460)

C++

• [OTel C++] Fix race when adding and removing callbacks. (#​37485)

Python

• [Backport to 1.67.x] Add templating and support for Python 3.13 (#​37643). (#​37803)
• Add templating and support for Python 3.13. ([#​37643](https://r

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun