chore(deps): bump the google group across 1 directory with 3 updates

[dependabot]

Bumps the google group with 3 updates in the / directory: google-auth, google-cloud-logging and google-cloud-pubsub.

Updates google-auth from 2.42.1 to 2.45.0

Release notes

Sourced from google-auth's releases.

google-auth 2.45.0

2.45.0 (2025-12-15)

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e)

google-auth 2.44.0

2.44.0 (2025-12-12)

Features

• MDS connections use mTLS (#1856) (0387bb95)

• support Python 3.14 (#1822) (0f7097e7)

• add ecdsa p-384 support (#1872) (39c381a5)

• Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cc)

• Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986)

Bug Fixes

• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907)

• Delegate workload cert and key default lookup to helper function (#1877) (b0993c7e)

• Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f)

google-auth 2.43.0

2.43.0 (2025-11-05)

Features

• Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) (1535eccb)

• Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) (395e405b)

• onboard google-auth to librarian (#1838) (c503eaa5)

Changelog

Sourced from google-auth's changelog.

2.45.0 (2025-12-15)

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e6b0d09b94c467cd432a0a635e8b05f5c)

2.44.0 (2025-12-13)

Features

• support Python 3.14 (#1822) (0f7097e78f247665b6ef0287d482033f7be2ed6d)
• add ecdsa p-384 support (#1872) (39c381a5f6881b590025f36d333d12eff8dc60fc)
• MDS connections use mTLS (#1856) (0387bb95713653d47e846cad3a010eb55ef2db4c)
• Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986ca03ee95bfffa9ad821124ed7e903e63)
• Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cced78bc1362a7fe596c32ebc9ce03c26b)

Bug Fixes

• Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f471747258f6d98d2d9bfde636358ecde)
• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907b8bdb7b5510e3c6fa8a3f3721e2436d7)
• Delegate workload cert and key default lookup to helper function (#1877) (b0993c7edaba505d0fb0628af28760c43034c959)

2.43.0 (2025-11-05)

Features

• Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) Add public wrapper for check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected. Also, fix check_use_client_cert to return boolean value. Change #1848 added the check_use_client_cert method that helps know if client cert should be used for mTLS connection. However, that was in a private class, thus, created a public wrapper of the same function so that it can be used by python Client Libraries. Also, updated check_use_client_cert to return a boolean value instead of existing string value for better readability and future scope. --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
• Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) The Python SDK will use a hybrid approach for mTLS enablement:

• If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set (either true or false), the SDK will respect that setting. This is necessary for test scenarios and users who need to explicitly control mTLS behavior.
• If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not set, the SDK will automatically enable mTLS only if it detects Managed Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF) certificate sources. In other cases where the variable is not set, mTLS

... (truncated)

Commits

• 08fabf7 chore: librarian release pull request: 20251215T132028Z (#1891)
• b32c934 feat: Adding Agent Identity bound token support and handling certificate mism...
• 262eb9e chore: librarian release pull request: 20251212T161150Z (#1888)
• 0f7097e feat: support Python 3.14 (#1822)
• e0c3296 fix(auth): Use public refresh method for source credentials in ImpersonatedCr...
• 78de790 fix(auth): Add temporary patch to workload cert logic to accomodate Cloud Run...
• 3e8a566 chore(tests): allow expired secret in system tests (#1883)
• b0993c7 fix(auth): Delegate workload cert and key default lookup to helper function (...
• 2c374d3 chore: update secret (#1879)
• 39c381a feat: add ecdsa p-384 support (#1872)
• Additional commits viewable in compare view

Updates google-cloud-logging from 3.12.1 to 3.13.0

Release notes

Sourced from google-cloud-logging's releases.

google-cloud-logging 3.13.0

3.13.0 (2025-12-15)

Features

• Add support for python 3.14 (#1065) (6be3df6a)

Bug Fixes

• remove setup.cfg configuration for creating universal wheels (#981) (70f612c3)

Changelog

Sourced from google-cloud-logging's changelog.

3.13.0 (2025-12-15)

Features

• Add support for python 3.14 (#1065) (6be3df6aa94539cd2ab22a4fac55b343862228b2)

Bug Fixes

• remove setup.cfg configuration for creating universal wheels (#981) (70f612c3281f1df13f3aba6b19bc4e9397297f3d)

Commits

• 1415883 chore: librarian release pull request: 20251215T134006Z (#1066)
• 6be3df6 feat: Add support for python 3.14 (#1065)
• 36fb427 chore(librarian): onboard to librarian (#1061)
• eb189bf chore: update Python generator version to 1.25.1 (#1003)
• a7a28d1 test: ignore DeprecationWarning for credentials_file argument and Python ve...
• 70f612c fix: remove setup.cfg configuration for creating universal wheels (#981)
• e4c445a chore: Update gapic-generator-python to 1.25.0 (#985)
• 14364a5 test: Added cleanup of old sink storage buckets (#991)
• See full diff in compare view

Updates google-cloud-pubsub from 2.33.0 to 2.34.0

Release notes

Sourced from google-cloud-pubsub's releases.

google-cloud-pubsub 2.34.0

2.34.0 (2025-12-16)

Features

• support mTLS certificates when available (#1566) (24761a2f)

Changelog

Sourced from google-cloud-pubsub's changelog.

2.34.0 (2025-12-16)

Features

• support mTLS certificates when available (#1566) (24761a2fedeb17f5af98a72a62306ad59306a553)

Commits

• 171f7d4 chore: librarian release pull request: 20251216T133533Z (#1567)
• 24761a2 feat(gapic): support mTLS certificates when available (#1566)
• bea7f78 chore: update container sha for librarian (#1557)
• 54e4a46 chore(librarian): specify all generated files in remove_regex (#1556)
• 78418d4 chore(librarian): onboard to librarian, including generate (#1552)
• e4b86c9 chore(librarian): remove release please configuration files (#1554)
• ac6cc25 chore: cleanup owlbot and release please files (#1548)
• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.