2.49.0-dev0 (2026-01-26)

Bug Fixes

• remove deprecated rsa dependency (e98cf69284d3620619a70b54fb0b9533caf11878)

2.48.0 (2026-01-21)

Features

• honor NO_GCE_CHECK environment variable (#1610) (383c9827)

• add configurable GCE Metadata Server retries (#1488) (454b441b)

• add cryptography as required dependency (#1929) (52558ae2)

• Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1)

Bug Fixes

• resolve circular imports (#1942) (25c1b064)

• Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a240)

• removes content-header from AWS IMDS get request (#1934) (97bfea9e)

• detect correct auth when ADC env var is set but empty (#1374) (bfc07e10)

• replace deprecated utcfromtimestamp (#1799) (e431f20c)

2.48.0rc0 (2026-01-20)

Features

• honor NO_GCE_CHECK environment variable (#1610) (383c98)
• add configurable GCE Metadata Server retries (#1488) (454b44)
• support mTLS IAM domain for Certificate based Access (#1938) (8dcf91)
• add cryptography as required dependency (#1929) (52558a)

Bug Fixes

• Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a2)
• replace deprecated utcfromtimestamp (#1799) (e431f2)
• detect correct auth when ADC env var is set by empty (#1374) (bfc07e)
• removed content-header from AWS IMDS (#1934) (97bfea)
• resolve circular imports (#1942) (25c1b0)

2.47.0 (2026-01-06)

Features

• drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4)

Bug Fixes

• Python 3.8 support (#1918) (60dc2001)

2.46.0 (2026-01-05)

Features

• Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d5)

Bug Fixes

• Fix test coverage for mtls_helper (#1886) (02e71631)

• use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f)

• add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588)

• fix the document of secure_authorized_session (#1536) (5d001470)

• raise RefreshError for missing token in impersonated credentials (#1897) (94d04e09)

• remove setup.cfg configuration for creating universal wheels (#1693) (c767531c)

Documentation

• update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2)

3.0.0.dev0 (2025-12-18)

Bug Fixes

• replace rsa dependency with cryptography (#1771) (1c2c49614076b3ed15a29e33b11ffe56a21ef165)

2.45.0 (2025-12-15)

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e)

2.44.0 (2025-12-12)

Features

• MDS connections use mTLS (#1856) (0387bb95)

• support Python 3.14 (#1822) (0f7097e7)

• add ecdsa p-384 support (#1872) (39c381a5)

• Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cc)

• Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986)

Bug Fixes

• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907)

• Delegate workload cert and key default lookup to helper function (#1877) (b0993c7e)

• Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f)

2.43.0 (2025-11-05)

Features

• Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) (1535eccb)

• Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) (395e405b)

• onboard google-auth to librarian (#1838) (c503eaa5)

2.42.1 (2025-10-30)

Bug Fixes

• Catch ValueError for json.loads() (#1842) (b074cad)