chore(deps): update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
alembic (changelog)	==1.15.2 -> ==1.16.1
certifi	==2025.1.31 -> ==2025.4.26
charset-normalizer (changelog)	==3.4.1 -> ==3.4.2
click (changelog)	==8.1.8 -> ==8.2.1
google-api-core	==2.24.2 -> ==2.25.0
google-auth	==2.38.0 -> ==2.40.3
google-cloud-bigquery	==3.31.0 -> ==3.34.0
google-cloud-testutils	==1.6.0 -> ==1.6.4
googleapis-common-protos (source)	==1.69.2 -> ==1.70.0
greenlet (changelog)	==3.1.1 -> ==3.2.2
grpcio (source)	==1.71.0 -> ==1.72.1
grpcio-status	==1.71.0 -> ==1.72.1
mako (source)	==1.3.9 -> ==1.3.10
packaging	==24.2 -> ==25.0
pluggy	==1.5.0 -> ==1.6.0
rsa	==4.9 -> ==4.9.1
shapely	==2.0.7 -> ==2.1.1
typing-extensions (changelog)	==4.13.0 -> ==4.14.0
urllib3 (changelog)	==2.3.0 -> ==2.4.0

---

Release Notes

certifi/python-certifi (certifi)

v2025.4.26

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.2

Compare Source

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#​591)
• Improved the overall reliability of the detector with CJK Ideographs. (#​605) (#​587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

pallets/click (click)

v8.2.1

Compare Source

Released 2025-05-20

• Fix flag value handling for flag options with a provided type. :issue:2894
  :issue:2897 :pr:2930
• Fix shell completion for nested groups. :issue:2906 :pr:2907
• Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
• Fix EOF handling for stdin input in CliRunner. :issue:2787

v8.2.0

Compare Source

Released 2025-05-10

• Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:2438

• Use flit_core instead of setuptools as build backend. :pr:2543

• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("click"), instead. :issue:2598

• BaseCommand is deprecated. Command is the base class for all
  commands. :issue:2589

• MultiCommand is deprecated. Group is the base class for all group
  commands. :issue:2590

• The current parser and related classes and methods, are deprecated.
  :issue:2205

  • OptionParser and the parser module, which is a modified copy of
    optparse in the standard library.
  • Context.protected_args is unneeded. Context.args contains any
    remaining arguments while parsing.
  • Parameter.add_to_parser (on both Argument and Option) is
    unneeded. Parsing works directly without building a separate parser.
  • split_arg_string is moved from parser to shell_completion.

• Enable deferred evaluation of annotations with
  from __future__ import annotations. :pr:2270

• When generating a command's name from a decorated function's name, the
  suffixes _command, _cmd, _group, and _grp are removed.
  :issue:2322

• Show the types.ParamType.name for types.Choice options within
  --help message if show_choices=False is specified.
  :issue:2356

• Do not display default values in prompts when Option.show_default is
  False. :pr:2509

• Add get_help_extra method on Option to fetch the generated extra
  items used in get_help_record to render help text. :issue:2516
  :pr:2517

• Keep stdout and stderr streams independent in CliRunner. Always
  collect stderr output and never raise an exception. Add a new
  output stream to simulate what the user sees in its terminal. Removes
  the mix_stderr parameter in CliRunner. :issue:2522 :pr:2523

• Option.show_envvar now also shows environment variable in error messages.
  :issue:2695 :pr:2696

• Context.close will be called on exit. This results in all
  Context.call_on_close callbacks and context managers added via
  Context.with_resource to be closed on exit as well. :pr:2680

• Add ProgressBar(hidden: bool) to allow hiding the progressbar. :issue:2609

• A UserWarning will be shown when multiple parameters attempt to use the
  same name. :issue:2396

• When using Option.envvar with Option.flag_value, the flag_value
  will always be used instead of the value of the environment variable.
  :issue:2746 :pr:2788

• Add Choice.get_invalid_choice_message method for customizing the
  invalid choice message. :issue:2621 :pr:2622

• If help is shown because no_args_is_help is enabled (defaults to True
  for groups, False for commands), the exit code is 2 instead of 0.
  :issue:1489 :pr:1489

• Contexts created during shell completion are closed properly, fixing
  a ResourceWarning when using click.File. :issue:2644 :pr:2800
  :pr:2767

• click.edit(filename) now supports passing an iterable of filenames in
  case the editor supports editing multiple files at once. Its return type
  is now also typed: AnyStr if text is passed, otherwise None.
  :issue:2067 :pr:2068

• Specialized typing of progressbar(length=...) as ProgressBar[int].
  :pr:2630

• Improve echo_via_pager behaviour in face of errors.
  :issue:2674

  • Terminate the pager in case a generator passed to echo_via_pager
    raises an exception.
  • Ensure to always close the pipe to the pager process and wait for it
    to terminate.
  • echo_via_pager will not ignore KeyboardInterrupt anymore. This
    allows the user to search for future output of the generator when
    using less and then aborting the program using ctrl-c.

• deprecated: bool | str can now be used on options and arguments. This
  previously was only available for Command. The message can now also be
  customised by using a str instead of a bool. :issue:2263 :pr:2271

  • Command.deprecated formatting in --help changed from
    (Deprecated) help to help (DEPRECATED).
  • Parameters cannot be required nor prompted or an error is raised.
  • A warning will be printed when something deprecated is used.

• Add a catch_exceptions parameter to CliRunner. If
  catch_exceptions is not passed to CliRunner.invoke, the value
  from CliRunner is used. :issue:2817 :pr:2818

• Option.flag_value will no longer have a default value set based on
  Option.default if Option.is_flag is False. This results in
  Option.default not needing to implement __bool__. :pr:2829

• Incorrect click.edit typing has been corrected. :pr:2804

• Choice is now generic and supports any iterable value.
  This allows you to use enums and other non-str values. :pr:2796
  :issue:605

• Fix setup of help option's defaults when using a custom class on its
  decorator. Removes HelpOption. :issue:2832 :pr:2840

googleapis/python-api-core (google-api-core)

v2.25.0

Compare Source

Features

• Add protobuf runtime version to x-goog-api-client header (#​812) (118bd96)
• Support dynamic retry backoff values (#​793) (70697a3)

Bug Fixes

• Resolve issue where pre-release versions of dependencies are installed (#​808) (1ca7973)

googleapis/google-auth-library-python (google-auth)

v2.40.3

Compare Source

Bug Fixes

• Auth fetch token from default endpoint (#​1779) (88891cc)
• Remove unnecessary call to mds service (#​1769) (7c61c7d)
• Retry 504 errors (#​1767) (554f967)

v2.40.2

Compare Source

Bug Fixes

• Remove sync response logs in AuthorizedSession (97ed1c8)
• Update test to consider new error message from cryptography (#​1765) (44e38b6)

v2.40.1

Compare Source

Bug Fixes

• Disable logging response body for async logs (#​1756) (2f0ddfe)

v2.40.0

Compare Source

Features

• Add request response logging to auth (#​1678) (77ad53e)

Bug Fixes

• Correct webauthn JSON parsing to be compliant with standard. (#​1658) (0c5ef36)

v2.39.0

Compare Source

Features

• Adds GA support for X.509 workload identity federation (#​1695) (7495960)

Bug Fixes

• Add impersonated SA via local ADC support for fetch_id_token (#​1740) (f249764)
• Add missing packaging dependency for feature requiring urllib3 (#​1732) (221f4a8)
• Add request timeout for MDS requests (#​1699) (9f7d3fa)
• Explicitly declare support for Python 3.13 (#​1741) (6fd04d5)

googleapis/python-bigquery (google-cloud-bigquery)

v3.34.0

Compare Source

Features

• Job creation mode GA (#​2190) (64cd39f)

Bug Fixes

• deps: Update all dependencies (#​2184) (12490f2)

Documentation

• Update query.py (#​2192) (9b5ee78)
• Use query_and_wait in the array parameters sample (#​2202) (28a9994)

v3.33.0

Compare Source

Features

• Add ability to set autodetect_schema query param in update_table (#​2171) (57f940d)
• Add dtype parameters to to_geodataframe functions (#​2176) (ebfd0a8)
• Support job reservation (#​2186) (cb646ce)

Bug Fixes

• Ensure AccessEntry equality and repr uses the correct entity_type (#​2182) (0217637)
• Ensure SchemaField.field_dtype returns a string (#​2188) (7ec2848)

v3.32.0

Compare Source

Features

• Add dataset access policy version attribute (#​2169) (b7656b9)
• Add preview support for incremental results (#​2145) (22b80bb)
• Add WRITE_TRUNCATE_DATA enum (#​2166) (4692747)
• Adds condition class and assoc. unit tests (#​2159) (a69d6b7)
• Support BigLakeConfiguration (managed Iceberg tables) (#​2162) (a1c8e9a)
• Update the AccessEntry class with a new condition attribute and unit tests (#​2163) (7301667)

Bug Fixes

• query() now warns when job_id is set and the default job_retry is ignored (#​2167) (ca1798a)
• Empty record dtypes (#​2147) (77d7173)
• Table iterator should not use bqstorage when page_size is not None (#​2154) (e89a707)

googleapis/python-test-utils (google-cloud-testutils)

v1.6.4

Compare Source

Miscellaneous Chores

• Force release for testing (#​279) (7333a49)

v1.6.3

Compare Source

Miscellaneous Chores

• Force release for testing (#​277) (05ad7f1)

v1.6.2

Compare Source

Miscellaneous Chores

• Force rebuild (#​275) (40fb90e)

v1.6.1

Compare Source

Bug Fixes

• Remove setup.cfg configuration for creating universal wheels (#​272) (32a23d2)

googleapis/google-cloud-python (googleapis-common-protos)

v1.70.0

Compare Source

Features

• expand QuotaFailure with quota error details (#​13745) (5535afe)

grpc/grpc (grpcio)

v1.72.1

Compare Source

This is release gRPC Core 1.72.1 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

• Pin Cython to 3.1.1 #​39609
  • This solves several issues:
    1. #​39588: Selecting unstable Cython releases when building gRPC Python artifacts.
    2. Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.
    3. cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).
• Fix Python 3.12 MacOS universal release artifact #​39418

v1.72.0

Compare Source

This is release gRPC Core 1.72.0 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

pypa/packaging (packaging)

v25.0

Compare Source

What's Changed

• Re-add a test for Unicode file name parsing by @​Siddhesh-Agarwal in https://github.com/pypa/packaging/pull/863
• Upgrade to ruff 0.9.1 by @​DimitriPapadopoulos in https://github.com/pypa/packaging/pull/865
• Add support for PEP 738 Android tags by @​mhsmith in https://github.com/pypa/packaging/pull/880
• feat(markers): support 'extras' and 'dependency_groups' markers by @​frostming in https://github.com/pypa/packaging/pull/888

New Contributors

• @​Siddhesh-Agarwal made their first contribution in https://github.com/pypa/packaging/pull/863
• @​mhsmith made their first contribution in https://github.com/pypa/packaging/pull/880
• @​frostming made their first contribution in https://github.com/pypa/packaging/pull/888

Full Changelog: pypa/packaging@24.2...25.0

pytest-dev/pluggy (pluggy)

v1.6.0

Compare Source

=========================

Deprecations and Removals

• #&#8203;556 <https://github.com/pytest-dev/pluggy/issues/556>_: Python 3.8 is no longer supported.

Bug Fixes

• #&#8203;504 <https://github.com/pytest-dev/pluggy/issues/504>_: Fix a regression in pluggy 1.1.0 where using :func:result.get_result() <pluggy.Result.get_result> on the same failed :class:~pluggy.Result causes the exception's traceback to get longer and longer.

• #&#8203;544 <https://github.com/pytest-dev/pluggy/issues/544>_: Correctly pass :class:StopIteration through hook wrappers.

  Raising a :class:StopIteration in a generator triggers a :class:RuntimeError.

  If the :class:RuntimeError of a generator has the passed in :class:StopIteration as cause
  resume with that :class:StopIteration as normal exception instead of failing with the :class:RuntimeError.

• #&#8203;573 <https://github.com/pytest-dev/pluggy/issues/573>_: Fix python 3.14 SyntaxError by rearranging code.

shapely/shapely (shapely)

v2.1.1

Compare Source

Bug fixes:

• Fix performance degradation calling shapely functions (caused by deprecation
  of certain positional arguments) (#​2283).
• Fix crash caused by from_ragged_array() (#​2291).
• Fix compilation error building with recent LLVM toolchain (#​2293).

v2.1.0

Compare Source

Shapely 2.1.0 is a feature release with various new functions,
improvements and bug fixes. Highlights include initial support for geometries
with M or ZM values, functionality for coverage validation and
simplification, and a set of new top-level functions.

Shapely supports Python >= 3.10, and binary wheels on PyPI include GEOS 3.13.1
and are now also provided for musllinux (Alpine) x86_64 platforms.

For a full changelog, see
https://shapely.readthedocs.io/en/latest/release/2.x.html#version-2-1-0

python/typing_extensions (typing-extensions)

v4.14.0

Compare Source

Changes since 4.14.0rc1:

• Remove __or__ and __ror__ methods from typing_extensions.Sentinel
  on Python versions <3.10. PEP 604 was introduced in Python 3.10, and
  typing_extensions does not generally attempt to backport PEP-604 methods
  to prior versions.
• Further update typing_extensions.evaluate_forward_ref with changes in Python 3.14.

v4.13.2

Compare Source

• Fix TypeError when taking the union of typing_extensions.TypeAliasType and a
  typing.TypeAliasType on Python 3.12 and 3.13.
  Patch by Joren Hammudoglu.
• Backport from CPython PR #​132160
  to avoid having user arguments shadowed in generated __new__ by
  @typing_extensions.deprecated.
  Patch by Victorien Plot.

v4.13.1

Compare Source

Bugfixes:

• Fix regression in 4.13.0 on Python 3.10.2 causing a TypeError when using Concatenate.
  Patch by Daraan.
• Fix TypeError when using evaluate_forward_ref on Python 3.10.1-2 and 3.9.8-10.
  Patch by Daraan.

urllib3/urllib3 (urllib3)

v2.4.0

Compare Source

==================

Features

• Applied PEP 639 by specifying the license fields in pyproject.toml. (#&#8203;3522 <https://github.com/urllib3/urllib3/issues/3522>__)
• Updated exceptions to save and restore more properties during the pickle/serialization process. (#&#8203;3567 <https://github.com/urllib3/urllib3/issues/3567>__)
• Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#&#8203;3571 <https://github.com/urllib3/urllib3/issues/3571>__)

Bugfixes

• Fixed a bug with partial reads of streaming data in Emscripten. (#&#8203;3555 <https://github.com/urllib3/urllib3/issues/3555>__)

Misc

• Switched to uv for installing development dependecies. (#&#8203;3550 <https://github.com/urllib3/urllib3/issues/3550>__)
• Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#&#8203;3566 <https://github.com/urllib3/urllib3/issues/3566>__)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[chalmerlowe]

LGTM