chore(deps): refresh pip-compile outputs python

[renovate-bot]

This PR contains the following updates:

Package	Update	Change	Pending	Age	Adoption	Passing	Confidence
	lockFileMaintenance	All locks refreshed
bleach	minor	==6.1.0 -> ==6.2.0
cryptography (changelog)	patch	==43.0.1 -> ==43.0.3
google-api-core	minor	==2.20.0 -> ==2.23.0
google-auth	minor	==2.35.0 -> ==2.36.0
google-cloud-trace (source)	minor	==1.13.5 -> ==1.14.0	1.14.1
grpcio (source)	minor	==1.66.1 -> ==1.67.1	1.68.0
locust (source)	minor	==2.31.7 -> ==2.32.2	2.32.3
opentelemetry-instrumentation-flask	minor	==0.48b0 -> ==0.49b1	0.49b2
opentelemetry-instrumentation-jinja2	minor	==0.48b0 -> ==0.49b1	0.49b2
opentelemetry-instrumentation-requests	minor	==0.48b0 -> ==0.49b1	0.49b2
opentelemetry-instrumentation-sqlalchemy	minor	==0.48b0 -> ==0.49b1	0.49b2
opentelemetry-sdk	minor	==1.27.0 -> ==1.28.1	1.28.2
psycopg2-binary (source, changelog)	patch	==2.9.9 -> ==2.9.10
pycryptodome (source, changelog)	minor	==3.20.0 -> ==3.21.0
pyparsing	minor	==3.1.4 -> ==3.2.0
zipp	minor	==3.20.2 -> ==3.21.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

mozilla/bleach (bleach)

v6.2.0

Compare Source

Backwards incompatible changes

• Dropped support for Python 3.8. (#​737)

Security fixes

None

Bug fixes

• Add support for Python 3.13. (#​736)
• Remove six depdenncy. (#​618)
• Update known-good versions for tinycss2. (#​732)
• Fix additional < followed by characters and EOF issues. (#​728)

pyca/cryptography (cryptography)

v43.0.3

Compare Source

googleapis/python-api-core (google-api-core)

v2.23.0

Compare Source

Features

• Migrate to pyproject.toml (#​736) (159e9a4)

v2.22.0

Compare Source

Features

• Add support for python 3.13 (#​696) (46b3d3a)

Bug Fixes

• Add type hints to ClientOptions (#​735) (b91ed19)
• Improve Any decode error (#​712) (0d5ed37)
• Require proto-plus >= 1.25.0 for Python 3.13 (#​740) (a26313e)
• Switch to unittest.mock from mock (#​713) (8c53381)

v2.21.0

Compare Source

Features

• Add support for asynchronous long running operations (#​724) (aaed69b)

Bug Fixes

• Set chunk size for async stream content (#​702) (45b8a6d)

googleapis/google-auth-library-python (google-auth)

v2.36.0

Compare Source

Features

• IAM signblob retries (#​1600) (484c8db)
• Making iam endpoint universe-aware (#​1604) (16c728d)
• Support External Account Authorized User as a Source Credential for impersonated credentials in ADC (#​1608) (875796c)

Bug Fixes

• Adding default parameters to updated interfaces (#​1622) (8cf1cb1)
• Change universe_domain to universe-domain (#​1613) (168fcc6)
• Remove base class to avoid type conflict (#​1619) (9e2789a)
• Revert templates for iam endpoints (#​1614) (0a4363a)
• Update secret (#​1611) (f070de0)
• Update secret (#​1617) (10f42a7)
• Update secret (#​1621) (6be19fb)

googleapis/google-cloud-python (google-cloud-trace)

v1.14.0: google-cloud-trace: v1.14.0

Compare Source

Features

• Add support for Python 3.13 (#​13210) (0b62ac6)

grpc/grpc (grpcio)

v1.67.1

Compare Source

This is release gRPC Core 1.67.1 (gesundheit). This is a Python-only patch release.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

v1.67.0

Compare Source

This is release 1.67.0 (gesundheit) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [ruby] reduce an INFO log to DEBUG (backporthttps://github.com/grpc/grpc/pull/376333). (#​37686)
• [release] Bump core version to 44.0.0. (#​37661)
• [RlsLB] Fix Deadlock. (#​37459)
• [Python Otel] Manage call tracer life cycle use call arena. (#​37460)

C++

• [OTel C++] Fix race when adding and removing callbacks. (#​37485)

Python

• [Backport to 1.67.x] Add templating and support for Python 3.13 (#​37643). (#​37803)
• Add templating and support for Python 3.13. (#​37643)
• [Python Distrib] Change warning to RuntimeError for version incompatibility. (#​37466)
• [reflection]: python: reflection returns original_request. (#​36944)

Ruby

• [ruby] drop ruby 2.7 support. (#​37430)
• [ruby] reduce ruby gpr_log invocations from INFO to DEBUG. (#​37426)
• [ruby] refactor flaky test and expose cancel_with_status. (#​37410)

v1.66.2

Compare Source

This is release gRPC Core 1.66.2 (gladiator).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

• Added support for Python 3.13 and templating system for supported Python versions (#​37643)

Full Changelog: grpc/grpc@v1.66.1...v1.66.2

locustio/locust (locust)

v2.32.2

Compare Source

What's Changed

• Fix doc link by @​tjandy98 in https://github.com/locustio/locust/pull/2961
• Webui Add Auth Info to Auth Page by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2963
• Fix Auth Args Type by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2965
• Report name by @​obriat in https://github.com/locustio/locust/pull/2947
• Locust Configurable Web Base Path by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2966
• Fix Web Base Path Env Variable by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2967
• Webui Add Markdown Support for Auth Page by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2969
• Fix Incorrectly Updating Stat History by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2972

New Contributors

• @​tjandy98 made their first contribution in https://github.com/locustio/locust/pull/2961

Full Changelog: locustio/locust@2.32.1...2.32.2

v2.32.1

Compare Source

What's Changed

• Web UI Remove Default Value for Select if Value is Provided by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2943
• Web UI Auth Add Password Visibility Toggle by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2941
• LocustBadStatusCode without url param in fasthttp by @​swaalt in https://github.com/locustio/locust/pull/2944
• Add Google Analytics to docs.locust.io by @​heyman in https://github.com/locustio/locust/pull/2948
• Webui Echarts Time Axis Should be Localized by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2949
• Webui Fix Echarts Axis Formatting by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2950
• Webui Override Markdown HTML Link with MUI Link by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2951
• Webui Add Custom Form to Auth Page by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2952
• Webui Echarts Redraw Request Lines if Changed by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2953

New Contributors

• @​swaalt made their first contribution in https://github.com/locustio/locust/pull/2944

Full Changelog: locustio/locust@2.32.0...2.32.1

v2.32.0

Compare Source

Full Changelog

Fixed bugs:

• logfile is erroniously written when there are many workers. #​2927
• Form field for users, spawn rate, and run time still visible in UI although CustomShape defined without use_common_options. #​2924
• --html with --process 4 then get ValueError: StatsEntry.use_response_times_cache must be set to True #​2908
• IPV6 check doesn't work as expected on AWS EKS #​2787

Merged pull requests:

• Log deprecation warning for Python 3.9 #​2940 (cyberw)
• Run tests on python 3.13 too #​2939 (cyberw)
• Web UI - Fix Line Chart #​2935 (andrewbaldwin44)
• Modern UI - Fix Hide Common Options #​2934 (andrewbaldwin44)
• Allow alerts and errors on new and edit form #​2932 (andrewbaldwin44)
• Add error message to swarm form #​2930 (andrewbaldwin44)
• Disable --csv for workers when using --processes. #​2929 (cyberw)
• Decide if ipv6 can work #​2923 (nc-marco)
• Webui Add Form Alert #​2922 (andrewbaldwin44)
• Add faq item: Basic auth (Authorization header) does not work after redirection #​2921 (obriat)
• Add CSRF example #​2920 (andrewbaldwin44)
• Web UI Add Exports for Library #​2919 (andrewbaldwin44)
• lower log level for unnecessary --autostart argument #​2918 (cyberw)

v2.31.8

Compare Source

What's Changed

• Fix RTD versioning with a deep git clone by @​mquinnfd in https://github.com/locustio/locust/pull/2913
• Url in template arg by @​fletelli42 in https://github.com/locustio/locust/pull/2914
• Web UI Auth submit should submit a POST request by @​andrewbaldwin44 in https://github.com/locustio/locust/pull/2915
• Log locust-cloud version if it is installed by @​cyberw in https://github.com/locustio/locust/pull/2916

New Contributors

• @​fletelli42 made their first contribution in https://github.com/locustio/locust/pull/2914

Full Changelog: locustio/locust@2.31.7...2.31.8

Legrandin/pycryptodome (pycryptodome)

v3.21.0: - Bourdeaux

Compare Source

New features

• By setting the PYCRYPTODOME_DISABLE_GMP environment variable,
  the GMP library will not be used even if detected.
• Add support for Curve25519 / X25519.
• Add support for Curve448 / X448.
• Add attribute curve to EccPoint and EccXPoint classes,
  with the canonical name of the curve.
• GH#781: the label for the SP800_108_Counter KDF may now
  contain zero bytes. Thanks to Julien Rische.
• GH#814: RSA keys for PSS can be imported.

Resolved issues

• GH#810: fixed negation of Ed25519 points.
• GH#819: accept an RFC5916 ECPrivateKey even if it doesn't
  contain any of the optional elements
  (parameters [0] and publicKey[1]).

Other changes

• Remove support for Python 3.5.

jaraco/zipp (zipp)

v3.21.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun