build(deps): bump globus-sdk from 3.65.0 to 4.8.1 in /apps/api

[dependabot]

Bumps globus-sdk from 3.65.0 to 4.8.1.

Release notes

Sourced from globus-sdk's releases.

v4.8.1

Fixed

• Fix a crash bug in the orjson compatibility module. (#1396)

  This manifested as a RuntimeError when code inspected the module.

v4.8.0

Added

• The SDK now supports use of orjson as an alternative JSON encoder and decoder. When orjson is installed, the SDK will automatically use it in place of the stdlib json module. (#1385)

• RequestsTransport objects are now visible via RequestsTransport.get_current_transport(), a staticmethod, while the transport is sending a request or being used to handle a response. This method raises a LookupError if there is no currently active transport. (#1385)

• The request encoders defined in globus_sdk.transport have been refactored into RequestsRepresentationProvider\s, objects responsible for encoding and decoding requests data in specific formats. In order to retain compatibility, they are still available aliased under their previous names, as "encoders". (#1385)

Removed

• The pinned field was removed from the experimental BookmarkCreateDocument and BookmarkUpdateDocument classes to align with the API, which does not support the field.

Deprecated

• The RequestsTransport class supports configuration of request encoding via a class-variable mapping, encoders. This limits the ability of the SDK to apply per-object customizations, as in the case of orjson support. The class variable encoders is deprecated. Users who wish to customize request encoding and response decoding should leverage the new representation_providers instance variable instead.

• The globus_sdk.transport.encoders module is deprecated. Use globus_sdk.transport.representation_providers instead.

v4.7.0

Added

• Add a per_page parameter to the FlowsClient.list_registered_apis() method. (#1390)

v4.6.0

Added

• Support for managing bookmarks via the Transfer v2 client (#1379)

• Added FlowsClient.get_registered_api(), which retrieves a registered API by ID. (#1386)

• Added FlowsClient.list_registered_apis(), which retrieves a list of registered APIs. (#1387)

Fixed

• Switch to lazy reading of response json to work with streaming responses. (#1381)

v4.5.0

Added

• Added a new globus_sdk.experimental.gcs_downloader module which provides experimental tooling for downloading files from HTTPS GCS Collections. The new module provides a GCSDownloader class for detecting requirements and downloading files. (#1342)

• Added the experimental TransferClientV2 client class along with helper classes TunnelCreateDocument and TunnelUpdateDocument (#1370)

... (truncated)

Changelog

Sourced from globus-sdk's changelog.

v4.8.1 (2026-06-16)

Fixed

• Fix a crash bug in the orjson compatibility module. (:pr:1396)

  This manifested as a RuntimeError when code inspected the module.

.. _changelog-4.8.0:

v4.8.0 (2026-06-10)

Added

• The SDK now supports use of orjson as an alternative JSON encoder and decoder. When orjson is installed, the SDK will automatically use it in place of the stdlib json module. (:pr:1385)

• RequestsTransport objects are now visible via RequestsTransport.get_current_transport(), a staticmethod, while the transport is sending a request or being used to handle a response. This method raises a LookupError if there is no currently active transport. (:pr:1385)

• The request encoders defined in globus_sdk.transport have been refactored into RequestsRepresentationProvider\s, objects responsible for encoding and decoding requests data in specific formats. In order to retain compatibility, they are still available aliased under their previous names, as "encoders". (:pr:1385)

Removed

• The pinned field was removed from the experimental BookmarkCreateDocument and BookmarkUpdateDocument classes to align with the API, which does not support the field.

Deprecated

• The RequestsTransport class supports configuration of request encoding via a class-variable mapping, encoders. This limits the ability of the SDK to apply per-object customizations, as in the case of orjson support. The class variable encoders is deprecated. Users who wish to customize request encoding and response decoding should leverage the new

... (truncated)

Commits

• 418ee94 Release v4.8.1 (#1397)
• 5f6881c Bump version and changelog for release
• 7e87cc6 (actions) update PR references
• 11d7a5d Fix a crash bug in the orjson compatibility module (#1396)
• a72dab1 Add a changelog fragment
• 53fd742 Update orjson_compat.py
• 31b6048 Release v4.8.0 (#1395)
• 78d2d50 Bump version and changelog for release
• d36fa48 removed pinned from v2 bookmarks (#1392)
• 14aec6d (actions) update PR references
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.