Update dependency google_auth to v2

This MR contains the following updates:

Package	Type	Update	Change
google_auth	ironbank-pypi	major	1.28.0 -> 2.11.0

---

Release Notes

googleapis/google-auth-library-python

v2.11.0

Compare Source

Features

• add integration tests for configurable token lifespan (#​1103) (124bae6)

Bug Fixes

• Async certificate retrieving (#​1101) (05f125d)

v2.10.0

Compare Source

Features

• add integration tests for pluggable auth (#​1073) (f8d776a)
• support for configurable token lifetime (0dc6a9a)
• support for configurable token lifetime (#​1079) (0dc6a9a)

Bug Fixes

• async certificate decoding (#​1085) (741c6c6)
• Async system tests were not unwrapping async_generators (#​1086) (29d248a)
• Fix IDTokenCredentials update bug (#​1072) (b62c25c)
• make expiration_time optional in response schema (#​1091) (032fb8d)
• refactor credential subclass parameters (#​1095) (8d15f69)

v2.9.1

Compare Source

Bug Fixes

• there was a raise missing for throwing exceptions (#​1077) (d1f17b0)

v2.9.0

Compare Source

Features

• pluggable auth support (#​1045) (de14f4e)

v2.8.0

Compare Source

Features

• add experimental GDCH support (#​1044) (94fb5e2)

v2.7.0

Compare Source

Features

• add experimental enterprise cert support (#​1052) (dda7dda)
• add experimental GDCH support (#​1022) (5367aac)
• Pluggable auth support (#​995) (62daa73)

Bug Fixes

• validate urls for external accounts (#​1031) (61b1f15)

Reverts

• pluggable auth support #​995 (#​1039) (513d999)
• revert experimental GDCH support (#​1022) (#​1042) (c720995)

Documentation

• fix changelog header to consistent size (#​1046) (e64d084)

v2.6.6

Compare Source

Bug Fixes

• silence TypeError during tear down stage (#​1027) (952a6aa)

v2.6.5

Compare Source

Bug Fixes

• add additional missing import in _default.py (#​1018) (638331b)

v2.6.4

Compare Source

Bug Fixes

• fix missing import in _default.py (#​1015) (63f4e38)

v2.6.3

Compare Source

Bug Fixes

• change requests lib import place (#​1010) (c753c08)
• clean up HTTP session and pool during tear down phase (#​1007) (d057376)
• pin click version and update sys test creds (#​1008) (ae2804b)

v2.6.2

Compare Source

Bug Fixes

• Rename aws imdsv2 url field and update token lifetime (#​982) (818e6d2)

Miscellaneous Chores

• let release-please finish the release (#​991) (d2bdc9a)

v2.6.0

Compare Source

Features

• ADC can load an impersonated service account credentials. (#​962) (52c8ef9)

Bug Fixes

• revert "feat: add api key support (#​826)" (#​964) (f9f23f4)

v2.5.0

Compare Source

Features

• ADC can load an impersonated service account credentials. (#​956) (a8eb4c8)

v2.4.1

Compare Source

Bug Fixes

• urllib3 import (#​953) (c8b5cae)

v2.4.0

Compare Source

Features

• add 'py.typed' declaration (#​919) (c993504)
• add api key support (#​826) (3b15092)

Bug Fixes

• deps: allow cachetools 5.0 for python 3.7+ (#​937) (1eae37d)
• fix the message format for metadata server exception (#​916) (e756f08)

Documentation

• fix intersphinx link for 'requests-oauthlib' (#​921) (967be4f)
• note ValueError in verify_oauth2_token (#​928) (82bc5f0)

v2.3.3

Compare Source

Bug Fixes

• add fetch_id_token_credentials (#​866) (8f1e9cf)
• fix error in sign_bytes (#​905) (ef31284)
• use 'int.to_bytes' and 'int.from_bytes' for py3 (#​904) (bd0ccc5)

v2.3.2

Compare Source

Bug Fixes

• add clock_skew_in_seconds to verify_token functions (#​894) (8e95c1e)

v2.3.1

Compare Source

Bug Fixes

• add back python 2.7 for gcloud usage only (#​892) (5bd5ccf)

Documentation

• Fix formatting of GCE_METADATA_HOST (#​890) (e2b3c98)

v2.3.0

Compare Source

Features

• add support for Python 3.10 (#​882) (19d41f8)

Bug Fixes

• ADC with impersonated workforce pools (#​877) (10bd9fb)

v2.2.1

Compare Source

Bug Fixes

• disable self signed jwt for domain wide delegation (#​873) (0cd15e2)

v2.2.0

Compare Source

Features

• add support for workforce pool credentials (#​868) (993bab2)

v2.1.0

Compare Source

Features

• Improve handling of clock skew (#​858) (45c4491)

Bug Fixes

• add SAML challenge to reauth (#​819) (13aed5f)
• disable warning if quota project id provided to auth.default() (#​856) (11ebaeb)
• rename CLOCK_SKEW and separate client/server user case (#​863) (738611b)

v2.0.2

Compare Source

Bug Fixes

• use 'int.to_bytes' rather than deprecated crypto wrapper (#​848) (b79b554)
• use int.from_bytes (#​846) (466aed9)

v2.0.1

Compare Source

Bug Fixes

• normalize AWS paths correctly on windows (#​842) (4e0fb1c)

v2.0.0

Compare Source

⚠ BREAKING CHANGES

• drop support for Python 2.7 (#​778) (560cf1e)

Features

• service account is able to use a private token endpoint (#​835) (20b817a)

Bug Fixes

• downscoping documentation bugs (#​830) (da8bb13)
• Fix missing space in error message. (#​821) (7b03988)

Documentation

• update user guide/references for downscoped creds (#​827) (d1840dc)

v1.35.0

Compare Source

Features

• service account is able to use a private token endpoint (#​835) (20b817a)

Bug Fixes

• downscoping documentation bugs (#​830) (da8bb13)
• Fix missing space in error message. (#​821) (7b03988)

Documentation

• update user guide/references for downscoped creds (#​827) (d1840dc)

v1.34.0

Compare Source

Features

• support refresh callable on google.oauth2.credentials.Credentials (#​812) (ec2fb18)

Bug Fixes

• do not use the GAE APIs on gen2+ runtimes (#​807) (7f7d92d)

v1.33.1

Compare Source

Bug Fixes

• fallback to source creds expiration in downscoped tokens (#​805) (dfad661)

Reverts

• revert "feat: service account is able to use a private token endpoint (#​784)" (#​808) (d94e65c)

v1.33.0

Compare Source

Features

• define CredentialAccessBoundary classes (#​793) (d883921)
• define google.auth.downscoped.Credentials class (#​801) (2f5c3a6)
• service account is able to use a private token endpoint (#​784) (0e26409)

Bug Fixes

• fix fetch_id_token credential lookup order to match adc (#​748) (c34452e)

Documentation

• fix code block formatting in 'user-guide.rst' (#​794) (4fd84bd)

v1.32.1

Compare Source

Bug Fixes

• avoid leaking sub-session created for '_auth_request' (#​789) (2079ab5)

v1.32.0

Compare Source

Features

• allow scopes for self signed jwt (#​776) (2cfe655)

v1.31.0

Compare Source

Features

• define useful properties on google.auth.external_account.Credentials (#​770) (f97499c)

Bug Fixes

• avoid deleting items while iterating (#​772) (a5e6b65)

v1.30.2

Compare Source

Bug Fixes

• dependencies: add urllib3 and requests to aiohttp extra (#​755) (a923442)
• enforce constraints during unit tests (#​760) (1a6496a), closes #​759
• session object was never used in aiohttp request (#​700) (#​701) (09e0389)

v1.30.1

Compare Source

Bug Fixes

• allow user to customize context aware metadata path in _mtls_helper (#​754) (e697687)
• fix function name in signing error message (#​751) (e9ca25f)

v1.30.0

Compare Source

Features

• add reauth support to async user credentials for gcloud (#​738) (9e10823). This internal feature is for gcloud developers only.

v1.29.0

Compare Source

Features

• add reauth feature to user credentials for gcloud (#​727) (82293fe). This internal feature is for gcloud developers only.

Bug Fixes

• Allow multiple audiences for id_token.verify_token (#​733) (56c3946)

v1.28.1

Compare Source

Bug Fixes

• support custom alg in jwt header for signing (#​729) (0a83706)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, click this checkbox.

---

This MR has been generated by Renovate Bot.