fix(deps): update dependency com.google.auth:google-auth-library-bom to v1.40.0

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.auth:google-auth-library-bom	1.30.0 -> 1.40.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

googleapis/google-auth-library-java (com.google.auth:google-auth-library-bom)

v1.40.0

Compare Source

Features

• Add projectId getter to GoogleCredentials (#​1813) (c3d9ee0)
• Support user defined or json defined scopes for impersonated token (#​1815) (84fc566)

Dependencies

• Bump guava to v33.5.0 (#​1825) (79f0a35)

v1.39.1

Compare Source

Documentation

• Additional information for deprecated fromStream() methods. (#​1802) (a0d873d)

v1.39.0

Compare Source

Features

• Add Credential Information to GoogleCredential classes (#​1791) (5511913)

Bug Fixes

• Indicate non-validated external credentials in generic methods (e7d4380)

Dependencies

• Add com.google.api:api-commons dependency (e7d4380)
• Update com.google.errorprone:error_prone_annotations dependency to 2.38.0 (e7d4380)

v1.38.0

Compare Source

Features

• Next release from main branch is 1.38.0 (#​1786) (1669dc8)

Bug Fixes

• Override toBuilder() for ExternalAccountCredential and subclasses (#​1793) (a9c3de6)

Documentation

• Update README with X.509 feature details (#​1790) (7b51cb3)

v1.37.1

Compare Source

Bug Fixes

• Correct typo in minExpirationTime variable name (#​1769) (91e6274)

v1.37.0

Compare Source

Features

• mtls: Introduce DefaultMtlsProviderFactory and SecureConnectProvider (#​1730) (c9fd1b1)

Bug Fixes

• Correct capitalization of GitHub (#​1761) (f79a2e4)
• Correct extra spaces in README heading (#​1760) (8d26666)
• Correct misspelling of OAuth in comments (#​1762) (42b9602)
• Correct typo in ServiceAccountJwtAccessCredentials.java comment (#​1765) (3058b06)
• Update Javadoc reference in ExternalAccountCredentials (#​1763) (5eb3659)

Documentation

• Duplicate "the" in Javadoc comments (#​1764) (5f7a084)

v1.36.0

Compare Source

Features

• Support ability to set universe domain in ServiceAccountJwtAccessCredentials (#​1754) (919ae32)

Bug Fixes

• IdTokenCredentials should fetch license id claim when requested (#​1450) (c5648a5)
• Update approval_prompt=force to prompt=consent (#​1752) (4543d04)

v1.35.0

Compare Source

Features

• Add support for mTLS authentication via X.509 certificates (#​1736) (b347603)
• Return X509 certificate chain as the subject token. (#​1746) (6d05be8)

Bug Fixes

• Handle optional fields in ExternalAccountCredentials with null JSON value gracefully (#​1706) (f1f306d)

v1.34.0

Compare Source

Features

• Implement X509 certificate provider (#​1722) (4340684)
• Next release from main branch is 1.34.0 (#​1698) (fe43815)
• Next release from main branch is 1.34.0 (#​1702) (4507cf9)

Bug Fixes

• Do not add padding in Client-Side CAB tokens. (#​1728) (8a75ccd)

v1.33.1

Compare Source

Dependencies

• Update dependency com.google.cloud:google-cloud-shared-config to v1.14.4 (53a2abc)

v1.33.0

Compare Source

Features

• Add client logging with slf4j (#​1586) (24761d6)

Dependencies

• Update dependency com.google.http-client:google-http-client-bom to v1.46.1 (96a5ad8)

v1.32.1

Compare Source

Bug Fixes

• Add cab-token-generator module to Auth BOM (#​1662) (e409b02)
• Remove unnecessary nexus-staging-maven-plugin activation (#​1665) (d138023)

Dependencies

• Update dependency com.google.http-client:google-http-client-bom to v1.46.0 (e53c441)

Documentation

• Update README with client-side CAB instructions (#​1607) (#​1666) (2996297)

v1.32.0

Compare Source

Features

• Introduce Client-Side Credential Access Boundary (CAB) functionality (#​1629) (f481123)

Bug Fixes

• Handle 404 and non 200 Status Code from MDS Identity Token calls (#​1636) (152c851)
• Respect token_uri from json in UserCredentials creation. (#​1630) (f92cc4f)

Documentation

• Re-organize the README + Add a section on migrating to GoogleCredentials (#​1644) (30b26b2)

v1.31.0

Compare Source

Features

• ImpersonatedCredentials to support universe domain for idtoken and signblob (#​1566) (adc2ff3)
• Support transport and binding-enforcement MDS parameters. (#​1558) (9828a8e)

Documentation

• Promote use of bill of materials in quickstart documentation (#​1620) (fc20d9c), closes #​1552

v1.30.1

Compare Source

Bug Fixes

• JSON parsing of S2A addresses. (#​1589) (9d5ebfe)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.