chore(deps): refresh pip-compile outputs python

[renovate-bot]

This PR contains the following updates:

Package	Update	Change	Pending	Age	Adoption	Passing	Confidence
	lockFileMaintenance	All locks refreshed
bcrypt	patch	==4.2.0 -> ==4.2.1
bleach	minor	==6.1.0 -> ==6.2.0
cachetools	patch	==5.5.0 -> ==5.5.1
certifi	minor	==2024.8.30 -> ==2024.12.14
click (changelog)	patch	==8.1.7 -> ==8.1.8
flask (changelog)	minor	==3.0.3 -> ==3.1.0
google-api-core	minor	==2.20.0 -> ==2.24.1
google-auth	minor	==2.35.0 -> ==2.38.0
google-cloud-trace (source)	minor	==1.13.5 -> ==1.15.0	1.16.0
googleapis-common-protos (source)	minor	==1.65.0 -> ==1.66.0	1.67.0
grpcio (source)	minor	==1.66.1 -> ==1.70.0
locust (source)	minor	==2.31.7 -> ==2.32.8	2.32.9
more-itertools	minor	==10.5.0 -> ==10.6.0
opentelemetry-exporter-gcp-trace (source)	minor	==1.7.0 -> ==1.9.0
opentelemetry-instrumentation-flask	minor	==0.48b0 -> ==0.51b0
opentelemetry-instrumentation-jinja2	minor	==0.48b0 -> ==0.51b0
opentelemetry-instrumentation-requests	minor	==0.48b0 -> ==0.51b0
opentelemetry-instrumentation-sqlalchemy	minor	==0.48b0 -> ==0.51b0
opentelemetry-propagator-gcp (source)	minor	==1.7.0 -> ==1.9.0
opentelemetry-sdk	minor	==1.27.0 -> ==1.30.0
protobuf	patch	==4.25.5 -> ==4.25.6
psycopg2-binary (source, changelog)	patch	==2.9.9 -> ==2.9.10
pycryptodome (source, changelog)	minor	==3.20.0 -> ==3.21.0
pyjwt	minor	==2.9.0 -> ==2.10.1
pyparsing	minor	==3.1.4 -> ==3.2.1
six	minor	==1.16.0 -> ==1.17.0
urllib3 (changelog)	minor	==2.2.3 -> ==2.3.0
wrapt (changelog)	minor	==1.16.0 -> ==1.17.2
zipp	minor	==3.20.2 -> ==3.21.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

mozilla/bleach (bleach)

v6.2.0

Compare Source

Backwards incompatible changes

• Dropped support for Python 3.8. (#​737)

Security fixes

None

Bug fixes

• Add support for Python 3.13. (#​736)
• Remove six depdenncy. (#​618)
• Update known-good versions for tinycss2. (#​732)
• Fix additional < followed by characters and EOF issues. (#​728)

tkem/cachetools (cachetools)

v5.5.1

Compare Source

===================

• Add documentation regarding caching of exceptions.

• Officially support Python 3.13.

• Update CI environment.

certifi/python-certifi (certifi)

v2024.12.14

Compare Source

pallets/click (click)

v8.1.8

Compare Source

Unreleased

• Fix an issue with type hints for click.open_file(). :issue:2717
• Fix issue where error message for invalid click.Path displays on
  multiple lines. :issue:2697
• Fixed issue that prevented a default value of "" from being displayed in
  the help for an option. :issue:2500
• The test runner handles stripping color consistently on Windows.
  :issue:2705
• Show correct value for flag default when using default_map.
  :issue:2632
• Fix click.echo(color=...) passing color to coloroma so it can be
  forced on Windows. :issue:2606.

pallets/flask (flask)

v3.1.0

Compare Source

Released 2024-11-13

• Drop support for Python 3.8. :pr:5623
• Update minimum dependency versions to latest feature releases.
  Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
• Provide a configuration option to control automatic option
  responses. :pr:5496
• Flask.open_resource/open_instance_resource and
  Blueprint.open_resource take an encoding parameter to use when
  opening in text mode. It defaults to utf-8. :issue:5504
• Request.max_content_length can be customized per-request instead of only
  through the MAX_CONTENT_LENGTH config. Added
  MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation
  about resource limits to the security page. :issue:5625
• Add support for the Partitioned cookie attribute (CHIPS), with the
  SESSION_COOKIE_PARTITIONED config. :issue:5472
• -e path takes precedence over default .env and .flaskenv files.
  load_dotenv loads default files in addition to a path unless
  load_defaults=False is passed. :issue:5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old
  secret keys that can still be used for unsigning. Extensions will need to
  add support. :issue:5621
• Fix how setting host_matching=True or subdomain_matching=False
  interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts
  requests to only that domain. :issue:5553
• Request.trusted_hosts is checked during routing, and can be set through
  the TRUSTED_HOSTS config. :issue:5636

googleapis/python-api-core (google-api-core)

v2.24.1

Compare Source

Bug Fixes

• Memory leak in bidi classes (#​770) (c1b8afa)
• Resolve the issue where rpc timeout of 0 is used when timeout expires (#​776) (a5604a5)

Documentation

• Add warnings regarding consuming externally sourced credentials (#​783) (0ec1825)

v2.24.0

Compare Source

Features

• Add automatic logging config to support debug logging (#​754) (d18d9b5)
• Update recognized logging fields (#​766) (5f80f77)

v2.23.0

Compare Source

Features

• Migrate to pyproject.toml (#​736) (159e9a4)

v2.22.0

Compare Source

Features

• Add support for python 3.13 (#​696) (46b3d3a)

Bug Fixes

• Add type hints to ClientOptions (#​735) (b91ed19)
• Improve Any decode error (#​712) (0d5ed37)
• Require proto-plus >= 1.25.0 for Python 3.13 (#​740) (a26313e)
• Switch to unittest.mock from mock (#​713) (8c53381)

v2.21.0

Compare Source

Features

• Add support for asynchronous long running operations (#​724) (aaed69b)

Bug Fixes

• Set chunk size for async stream content (#​702) (45b8a6d)

googleapis/google-auth-library-python (google-auth)

v2.38.0

Compare Source

Features

• Adding domain-wide delegation flow in impersonated credential (#​1624) (34ee3fe)

Documentation

• Add warnings regarding consuming externally sourced credentials (d049370)

v2.37.0

Compare Source

Features

• Allow users to use jwk keys for verifying ID token (#​1641) (98c3ed9)

v2.36.0

Compare Source

Features

• IAM signblob retries (#​1600) (484c8db)
• Making iam endpoint universe-aware (#​1604) (16c728d)
• Support External Account Authorized User as a Source Credential for impersonated credentials in ADC (#​1608) (875796c)

Bug Fixes

• Adding default parameters to updated interfaces (#​1622) (8cf1cb1)
• Change universe_domain to universe-domain (#​1613) (168fcc6)
• Remove base class to avoid type conflict (#​1619) (9e2789a)
• Revert templates for iam endpoints (#​1614) (0a4363a)
• Update secret (#​1611) (f070de0)
• Update secret (#​1617) (10f42a7)
• Update secret (#​1621) (6be19fb)

googleapis/google-cloud-python (google-cloud-trace)

v1.15.0: google-cloud-trace: v1.15.0

Compare Source

Features

• Add support for opt-in debug logging (cf4d0e0)

Bug Fixes

• Fix typing issue with gRPC metadata when key ends in -bin (cf4d0e0)

v1.14.1: google-cloud-trace: v1.14.1

Compare Source

Bug Fixes

• disable universe-domain validation (#​13246) (bcad563)

v1.14.0: google-cloud-resource-manager: v1.14.0

Compare Source

Features

• Add support for opt-in debug logging (8e6b0cc)

Bug Fixes

• Fix typing issue with gRPC metadata when key ends in -bin (8e6b0cc)

grpc/grpc (grpcio)

v1.70.0

Compare Source

This is release 1.70.0 (genius) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [BoringSSL] Update third_party/boringssl-with-bazel. (#​38274)

C++

• gRPC C++ begins to require C++17 or later to build and use gRPC C++. You may need the following settings
  • CMake: Add CMAKE_CXX_STANDARD=17 to your CMake build command.
  • Bazel: Add --cxxopt='/std:c++17' and --host_cxxopt='/std:c++17' to your Bazel build command.
  • gRPC 1.69, the final version compatible with C++14, will be supported until December 10, 2025, according to https://github.com/grpc/proposal/blob/master/L120-requiring-cpp17.md.

v1.69.0

Compare Source

This is release 1.69.0 (gridiron) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Alarm] Fix Alarm reuse on cancellation. (#​38114)
• [xDS RBAC] Support string_match in HeaderMatcher. (#​38185)
• [pick_first] fix shutdown bug in new PF impl. (#​38144)
• [c-ares] Fix inverted length check in GrpcPolledFdWindows. (#​38101)
• [RetryFilter] Copy the SliceBuffer from RetryFilter's cache to batch payload. (#​38069)
• [EventEngine] Add stronger wording on Endpoint::Read contract. (#​38036)
• [chttp2] Fix channelz address. (#​38022)
• [XdsClient] Add missing authority to XdsClient metrics scope. (#​38009)
• [EventEngine] API contract: Endpoint::Read will provide either an error or data, but never both. (#​38019)
• [Build] Dropped Bazel 6.x support. (#​37979)

Python

• [Build] Override MACOSX_DEPLOYMENT_TARGET for gRPC Python. (#​37997)

v1.68.1

Compare Source

This is release 1.68.1 (groovy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [xDS RBAC] Support string_match in HeaderMatcher (#​38185). (#​38198)

v1.68.0

Compare Source

This is release 1.68.0 (groovy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [XdsClient][Backport] Add missing authority to XdsClient metrics scope (#​38009). (#​38023)
• [Release] Bump core version in preparation for 1.68 Branch Cut. (#​37941)
• [ConfigFetcher] Set HTTP2 error to NO_ERROR to do graceful GOAWAYs. (#​37939)
• [ruby] reduce INFO log for server CQ pluck registration to DEBUG. (#​37633)
• [EventEngine] Enable the PosixEventEngine client experiment. (#​35985)
• [chttp2_server] Fix race between connection starting and it being orphaned. (#​37683)
• [Chttp2Server] Fix race between connection manager updates and handshake. (#​37772)
• [xds] Fix XdsClient race between ResourceDoesNotExist timer and receiving resources. (#​37678)

C++

• [Build] Minimum version of MSVC is now 2022. (#​37687)
• [Build] Bumped the minimum version of cmake. (#​37702)

Python

• Add templating and support for Python 3.13. (#​37643)

v1.67.1

Compare Source

This is release gRPC Core 1.67.1 (gesundheit). This is a Python-only patch release.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

v1.67.0

Compare Source

This is release 1.67.0 (gesundheit) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [ruby] reduce an INFO log to DEBUG (backporthttps://github.com/grpc/grpc/pull/376333). (#​37686)
• [release] Bump core version to 44.0.0. (#​37661)
• [RlsLB] Fix Deadlock. (#​37459)
• [Python Otel] Manage call tracer life cycle use call arena. (#​37460)

C++

• [OTel C++] Fix race when adding and removing callbacks. (#​37485)

Python

• [Backport to 1.67.x] Add templating and support for Python 3.13 (#​37643). (#​37803)
• Add templating and support for Python 3.13. (#​37643)
• [Python Distrib] Change warning to RuntimeError for version incompatibility. (#​37466)
• [reflection]: python: reflection returns original_request. (#​36944)

Ruby

• [ruby] drop ruby 2.7 support. (#​37430)
• [ruby] reduce ruby gpr_log invocations from INFO to DEBUG. (#​37426)
• [ruby] refactor flaky test and expose cancel_with_status. (#​37410)

v1.66.2

Compare Source

This is release gRPC Core 1.66.2 (gladiator).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

• Added support for Python 3.13 and templating system for supported Python versions (#​37643)

Full Changelog: grpc/grpc@v1.66.1...v1.66.2

locustio/locust (locust)

v2.32.8

Compare Source

Fix a single broken link in the UI

Full Changelog: locustio/locust@2.32.7...2.32.8

v2.32.7

Compare Source

Full Changelog

Merged pull requests:

• Web UI: Allow Showing Only an Error Message on the Login Page #​3037 (andrewbaldwin44)
• Allow Empty Tables when Filtering #​3036 (andrewbaldwin44)
• Allow xAxis and Grid to be Configured in Echarts #​3035 (andrewbaldwin44)
• Code quality: Fix unused imports and switch on related ruff check #​3034 (insspb)
• Add tab with locust cloud features #​3032 (andrewbaldwin44)
• fix readme image ref links #​3031 (changchaishi)

v2.32.6

Compare Source

What's Changed

• Update LICENSE, fix copyright license year by @​JasonnnW3000 in https://github.com/locustio/locust/pull/3019
• Optimize run time of some unit tests by @​cyberw in https://github.com/locustio/locust/pull/3020
• pin poetry-core version to <2.0.0 in pyproject.toml by @​mgor in https://github.com/locustio/locust/pull/3025
• Move some argument parsing/validation from main.py to argument_parser.py and remove deprecated parameter --hatch-rate by @​ftb-skry in https://github.com/locustio/locust/pull/3026
• Update tests to check for hostname instead of fqdn by @​ajt89 in https://github.com/locustio/locust/pull/3027
• Update Dockerfile to use Python 3.12 as base by @​vejmoj1 in https://github.com/locustio/locust/pull/3029

New Contributors

• @​JasonnnW3000 made their first contribution in https://github.com/locustio/locust/pull/3019
• @​ftb-skry made their first contribution in https://github.com/locustio/locust/pull/3026

Full Changelog: locustio/locust@2.32.5...2.32.6

v2.32.5

Compare Source

Full Changelog

Merged pull requests:

• Make cpu usage check sleep BEFORE the first check, and make it slightly less frequent #​3014 (cyberw)
• FastHttpUser: Fix ssl loading performance issue by avoiding to load certs when they wont be used anyway #​3013 (cyberw)
• Treat exceptions in init event handler as fatal #​3009 (cyberw)
• Add create store export #​3004 (andrewbaldwin44)

v2.32.4

Compare Source

Full Changelog

Fixed bugs:

• Number of requests lower than expected in web UI #​3000
• Reports download links do not contain web-base-path #​2998
• Setuptools CVE-2024-6345 #​2995
• When using exclude-tags to exclude more than two tags, this setting will not take effect #​2994

Merged pull requests:

• Allow showing auth info on blank page #​3002 (andrewbaldwin44)
• Number of requests lower than expected in web UI #​3001 (andrewbaldwin44)
• Webui links should be relative #​2999 (andrewbaldwin44)
• Dependency and node version bump #​2997 (andrewbaldwin44)
• Fix example in docs #​2993 (daniloakamine)
• Add Input Type to Login Form #​2992 (andrewbaldwin44)
• Update configuration.rst to show minimalistic config example #​2990 (vkuehn)
• Fix README Images for PyPi #​2989 (andrewbaldwin44)

v2.32.3

Compare Source

Full Changelog

Fixed bugs:

• Setuptools CVE-2022-40897 #​2986
• master crash with different version worker #​2975

Merged pull requests:

• Ensure we never use old version of setuptools #​2988 (cyberw)
• README Themed Screenshots #​2985 (andrewbaldwin44)
• When specifying locustfile fia url, output start of response text when it wasnt valid python #​2983 (cyberw)
• Use debug log level for first 5s of waiting for workers to be ready. #​2982 (cyberw)
• Add option for Extra Options to be Required #​2981 (andrewbaldwin44)
• Update ruff mypy #​2978 (tdadela)
• Fix crash with older worker version requesting locustfile from master #​2976 (cyberw)
• Use f-strings instead of old style string interpolation #​2974 (tdadela)

v2.32.2

Compare Source

Full Changelog

Fixed bugs:

• Requests not ramping up after switching to using pydantic in django project #​2960
• The locust chart shows that data is still being recorded after the timed run time expires #​2910

Closed issues:

• Downloading report should provide a meaningful human name #​2931
• Hard coded path make it impossible to host the UI on a path (instead of the domain root) #​2909

Merged pull requests:

• Fix Incorrectly Updating Stat History #​2972 (andrewbaldwin44)
• Webui Add Markdown Support for Auth Page #​2969 (andrewbaldwin44)
• Fix Web Base Path Env Variable #​2967 (andrewbaldwin44)
• Locust Configurable Web Base Path #​2966 (andrewbaldwin44)
• Fix Auth Args Type #​2965 (andrewbaldwin44)
• Webui Add Auth Info to Auth Page #​2963 (andrewbaldwin44)
• Fix doc link #​2961 (tjandy98)
• Report name #​2947 (obriat)

v2.32.1

Compare Source

What's Changed

• Web UI Remove Default Value for Select if Value is Provided by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2943
• Web UI Auth Add Password Visibility Toggle by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2941
• LocustBadStatusCode without url param in fasthttp by @​swaalt in https://github.com/locustio/locust/pull/2944
• Add Google A

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun