chore(deps): update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
Flask (changelog)	==2.2.5 -> ==3.1.2				major
flake8 (changelog)	==6.0.0 -> ==7.3.0				major
flask (changelog)	==2.2.5 -> ==3.1.2				major
google-cloud-error-reporting	==1.9.1 -> ==1.12.0				minor
google-cloud-firestore	==2.11.1 -> ==2.21.0				minor
google-cloud-logging	==3.5.0 -> ==3.12.1				minor
google-cloud-pubsub	==2.16.1 -> ==2.33.0				minor
google-cloud-storage	==2.9.0 -> ==3.4.1				major
google-cloud-translate (source)	==3.11.1 -> ==3.22.0				minor
honcho	==1.1.0 -> ==2.0.0				major
nox	==2023.4.22 -> ==2025.10.16				major
pytest (changelog)	==7.3.1 -> ==8.4.2				major
pytest (changelog)	==7.1.2 -> ==8.4.2				major
python	3.11-slim -> 3.14-slim			final	minor
six	==1.16.0 -> ==1.17.0				minor

---

Release Notes

pallets/flask (Flask)

v3.1.2

Compare Source

Released 2025-08-19

• stream_with_context does not fail inside async views. :issue:5774
• When using follow_redirects in the test client, the final state
  of session is correct. :issue:5786
• Relax type hint for passing bytes IO to send_file. :issue:5776

v3.1.1

Compare Source

Released 2025-05-13

• Fix signing key selection order when key rotation is enabled via
  SECRET_KEY_FALLBACKS. :ghsa:4grg-w6v8-c28g
• Fix type hint for cli_runner.invoke. :issue:5645
• flask --help loads the app and plugins first to make sure all commands
  are shown. :issue:5673
• Mark sans-io base class as being able to handle views that return
  AsyncIterable. This is not accurate for Flask, but makes typing easier
  for Quart. :pr:5659

v3.1.0

Compare Source

Released 2024-11-13

• Drop support for Python 3.8. :pr:5623
• Update minimum dependency versions to latest feature releases.
  Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:5624,5633
• Provide a configuration option to control automatic option
  responses. :pr:5496
• Flask.open_resource/open_instance_resource and
  Blueprint.open_resource take an encoding parameter to use when
  opening in text mode. It defaults to utf-8. :issue:5504
• Request.max_content_length can be customized per-request instead of only
  through the MAX_CONTENT_LENGTH config. Added
  MAX_FORM_MEMORY_SIZE and MAX_FORM_PARTS config. Added documentation
  about resource limits to the security page. :issue:5625
• Add support for the Partitioned cookie attribute (CHIPS), with the
  SESSION_COOKIE_PARTITIONED config. :issue:5472
• -e path takes precedence over default .env and .flaskenv files.
  load_dotenv loads default files in addition to a path unless
  load_defaults=False is passed. :issue:5628
• Support key rotation with the SECRET_KEY_FALLBACKS config, a list of old
  secret keys that can still be used for unsigning. Extensions will need to
  add support. :issue:5621
• Fix how setting host_matching=True or subdomain_matching=False
  interacts with SERVER_NAME. Setting SERVER_NAME no longer restricts
  requests to only that domain. :issue:5553
• Request.trusted_hosts is checked during routing, and can be set through
  the TRUSTED_HOSTS config. :issue:5636

v3.0.3

Compare Source

Released 2024-04-07

• The default hashlib.sha1 may not be available in FIPS builds. Don't
  access it at import time so the developer has time to change the default.
  :issue:5448
• Don't initialize the cli attribute in the sansio scaffold, but rather in
  the Flask concrete class. :pr:5270

v3.0.2

Compare Source

Released 2024-02-03

• Correct type for jinja_loader property. :issue:5388
• Fix error with --extra-files and --exclude-patterns CLI options.
  :issue:5391

v3.0.1

Compare Source

Released 2024-01-18

• Correct type for path argument to send_file. :issue:5336
• Fix a typo in an error message for the flask run --key option. :pr:5344
• Session data is untagged without relying on the built-in json.loads
object_hook. This allows other JSON providers that don't implement that.
  :issue:5381
• Address more type findings when using mypy strict mode. :pr:5383

v3.0.0

Compare Source

Released 2023-09-30

• Remove previously deprecated code. :pr:5223
• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("flask"), instead. :issue:5230
• Restructure the code such that the Flask (app) and Blueprint
  classes have Sans-IO bases. :pr:5127
• Allow self as an argument to url_for. :pr:5264
• Require Werkzeug >= 3.0.0.

v2.3.3

Compare Source

Released 2023-08-21

• Python 3.12 compatibility.
• Require Werkzeug >= 2.3.7.
• Use flit_core instead of setuptools as build backend.
• Refactor how an app's root and instance paths are determined. :issue:5160

v2.3.2

Compare Source

Released 2023-05-01

• Set Vary: Cookie header when the session is accessed, modified, or refreshed.
• Update Werkzeug requirement to >=2.3.3 to apply recent bug fixes.
  :ghsa:m2qf-hxjv-5gpq

v2.3.1

Compare Source

Released 2023-04-25

• Restore deprecated from flask import Markup. :issue:5084

v2.3.0

Compare Source

Released 2023-04-25

• Drop support for Python 3.7. :pr:5072

• Update minimum requirements to the latest versions: Werkzeug>=2.3.0, Jinja2>3.1.2,
  itsdangerous>=2.1.2, click>=8.1.3.

• Remove previously deprecated code. :pr:4995

  • The push and pop methods of the deprecated _app_ctx_stack and
    _request_ctx_stack objects are removed. top still exists to give
    extensions more time to update, but it will be removed.
  • The FLASK_ENV environment variable, ENV config key, and app.env
    property are removed.
  • The session_cookie_name, send_file_max_age_default, use_x_sendfile,
    propagate_exceptions, and templates_auto_reload properties on app
    are removed.
  • The JSON_AS_ASCII, JSON_SORT_KEYS, JSONIFY_MIMETYPE, and
    JSONIFY_PRETTYPRINT_REGULAR config keys are removed.
  • The app.before_first_request and bp.before_app_first_request decorators
    are removed.
  • json_encoder and json_decoder attributes on app and blueprint, and the
    corresponding json.JSONEncoder and JSONDecoder classes, are removed.
  • The json.htmlsafe_dumps and htmlsafe_dump functions are removed.
  • Calling setup methods on blueprints after registration is an error instead of a
    warning. :pr:4997

• Importing escape and Markup from flask is deprecated. Import them
  directly from markupsafe instead. :pr:4996

• The app.got_first_request property is deprecated. :pr:4997

• The locked_cached_property decorator is deprecated. Use a lock inside the
  decorated function if locking is needed. :issue:4993

• Signals are always available. blinker>=1.6.2 is a required dependency. The
  signals_available attribute is deprecated. :issue:5056

• Signals support async subscriber functions. :pr:5049

• Remove uses of locks that could cause requests to block each other very briefly.
  :issue:4993

• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:4947

• Ensure subdomains are applied with nested blueprints. :issue:4834

• config.from_file can use text=False to indicate that the parser wants a
  binary file instead. :issue:4989

• If a blueprint is created with an empty name it raises a ValueError.
  :issue:5010

• SESSION_COOKIE_DOMAIN does not fall back to SERVER_NAME. The default is not
  to set the domain, which modern browsers interpret as an exact match rather than
  a subdomain match. Warnings about localhost and IP addresses are also removed.
  :issue:5051

• The routes command shows each rule's subdomain or host when domain
  matching is in use. :issue:5004

• Use postponed evaluation of annotations. :pr:5071

pycqa/flake8 (flake8)

v7.3.0

Compare Source

v7.2.0

Compare Source

v7.1.2

Compare Source

v7.1.1

Compare Source

v7.1.0

Compare Source

v7.0.0

Compare Source

v6.1.0

Compare Source

googleapis/python-error-reporting (google-cloud-error-reporting)

v1.12.0

Compare Source

Features

• Add REST Interceptors which support reading metadata (1d120c7)
• Add support for opt-in debug logging (1d120c7)

Bug Fixes

• Allow Protobuf 6.x (#​557) (9f8faeb)
• Fix typing issue with gRPC metadata when key ends in -bin (1d120c7)
• Remove setup.cfg configuration for creating universal wheels (#​562) (0738c03)
• Require proto-plus >= 1.25.0 for Python 3.13 (#​567) (d5cd225)

v1.11.1

Compare Source

Bug Fixes

• Allow Protobuf 5.x (#​507) (8d33168)
• Retry and timeout values do not propagate in requests during pagination (#​518) (cbe41fd)

Documentation

• Add summary_overview template (#​496) (988def5)
• Removes references as a "global-only" service (1fef616)
• Updates documentation with regional resource names for multiple requests (1fef616)

v1.11.0

Compare Source

Features

• Allow users to explicitly configure universe domain (#​475) (e4c3454)

v1.10.0

Compare Source

Features

• Add support for Python 3.12 (#​459) (36c1b59)
• Use native namespaces instead of pkg_resources (#​463) (a63e3f2)

Bug Fixes

• Use retry_async instead of retry in async client (#​462) (44c2b14)

Documentation

• Minor formatting (#​448) (48823d4)

v1.9.2

Compare Source

Bug Fixes

• Add async context manager return types (#​434) (319fa54)

googleapis/python-firestore (google-cloud-firestore)

v2.21.0

Compare Source

Features

• Support Sequence[float] as query_vector in FindNearest (#​908) (6c81626)

Bug Fixes

• Add missing DocumentReference return value to .document (#​1053) (043d9ef)

v2.20.2

Compare Source

Bug Fixes

• Allow Protobuf 6.x (#​1028) (13d5c6d)
• Remove setup.cfg configuration for creating universal wheels (#​1030) (727098b)

v2.20.1

Compare Source

Bug Fixes

• Bump default deadline on CreateDatabase and RestoreDatabase to 2 minutes (#​975) (995fad6)
• Client-side path validation for batch.update (#​1021) (3b7595b)
• Watch thread deadlock on exit (#​1014) (c47677a)

v2.20.0

Compare Source

Features

• Support not_equal queries for none and nan (#​988) (cbaf4ae)

Bug Fixes

• Clean up resources on Watch close (#​1004) (6d68dcd)
• Populate transaction attributes after commit (#​977) (aa3c0a3)

v2.19.0

Compare Source

Features

• Add Database.SourceInfo and Database.source_info (information about database provenance, specifically for restored databases) (#​963) (4e15714)
• Query profiling part 1: synchronous (#​938) (1614b3f)
• Query profiling part 2: asynchronous (#​961) (060a3ef)

v2.18.0

Compare Source

Features

• Support returning computed distance and set distance thresholds on VectorQueries (#​960) (5c2192d)

Bug Fixes

• Remove custom retry loop (#​948) (04bb206)

v2.17.2

Compare Source

Bug Fixes

• Allow protobuf 5.x; require protobuf >=3.20.2 (#​950) (6f86506)
• Support async vector search from a collection (#​949) (6446e29)

v2.17.1

Compare Source

Bug Fixes

• Allow protobuf 5.x (#​919) (3a13bf9)

v2.17.0

Compare Source

Features

• Support async Vector Search (#​901) (2de1620)
• Use generator for stream results (#​926) (3e5df35)

v2.16.1

Compare Source

Bug Fixes

• repr method in vector.py (#​903) (6886f2b)

Documentation

• Allow 14 week backup retention for Firestore daily backups (#​899) (9521ded)

v2.16.0

Compare Source

Features

• A new message Backup is added (fc7b906)
• A new message BackupSchedule is added (fc7b906)
• A new message CreateBackupScheduleRequest is added (fc7b906)
• A new message DailyRecurrence is added (fc7b906)
• A new message DeleteBackupRequest is added (fc7b906)
• A new message DeleteBackupScheduleRequest is added (fc7b906)
• A new message GetBackupRequest is added (fc7b906)
• A new message GetBackupScheduleRequest is added (fc7b906)
• A new message ListBackupSchedulesRequest is added (fc7b906)
• A new message ListBackupSchedulesResponse is added (fc7b906)
• A new message ListBackupsRequest is added (fc7b906)
• A new message ListBackupsResponse is added (fc7b906)
• A new message RestoreDatabaseMetadata is added (fc7b906)
• A new message RestoreDatabaseRequest is added (fc7b906)
• A new message UpdateBackupScheduleRequest is added (fc7b906)
• A new message WeeklyRecurrence is added (fc7b906)
• A new method CreateBackupSchedule is added to service FirestoreAdmin (fc7b906)
• A new method DeleteBackup is added to service FirestoreAdmin (fc7b906)
• A new method DeleteBackupSchedule is added to service FirestoreAdmin (fc7b906)
• A new method GetBackup is added to service FirestoreAdmin (fc7b906)
• A new method GetBackupSchedule is added to service FirestoreAdmin (fc7b906)
• A new method ListBackups is added to service FirestoreAdmin (fc7b906)
• A new method ListBackupSchedules is added to service FirestoreAdmin (fc7b906)
• A new method RestoreDatabase is added to service FirestoreAdmin (fc7b906)
• A new method UpdateBackupSchedule is added to service FirestoreAdmin (fc7b906)
• A new resource_definition firestore.googleapis.com/Backup is added (fc7b906)
• A new resource_definition firestore.googleapis.com/BackupSchedule is added (fc7b906)
• Add ExplainMetrics field to RunAggregationQueryResponse (fc7b906)
• Add ExplainMetrics field to RunQueryResponse (fc7b906)
• Add ExplainOptions field to RunAggregationQueryRequest (fc7b906)
• Add ExplainOptions field to RunQueryRequest (fc7b906)
• Add new types ExplainOptions, ExplainMetrics, PlanSummary, ExecutionStats (fc7b906)
• Add Vector Index API (#​894) (c76f087)
• Add VectorSearch API (fc7b906)
• Support Vector Search (#​896) (08fcaaf)

Bug Fixes

• Add google-auth as a direct dependency (#​875) (ae5ba71)

Documentation

• Correct BackupSchedule recurrence docs that mentioned specific time of day (#​898) (a8ed3ea)
• Fix docs structure for Firestore (#​868) (8ddb859)

v2.15.0

Compare Source

Features

• Add DeleteDatabase API and delete protection (18f61c2)

Bug Fixes

• Find emulator project id from environment variable (afd16e1)

Documentation

• Fix formatting due to unclosed backtick (18f61c2)
• Improve the documentation on Document.fields (#​831) (19a55bd)
• Update Database API description (18f61c2)

v2.14.0

Compare Source

Features

• Add support for Python 3.12 (#​795) (b301f8b)
• Expose Firestore namespace ID fields in import/export APIs to stable (3a624a9)
• Expose Firestore PITR fields in Database to stable (3a624a9)
• Expose Firestore snapshot_time field in export API to stable (3a624a9)
• Introduce compatibility with native namespace packages (#​792) (510adce)
• SERVER_TIMESTAMP should survive deep copies (#​820) (#​821) (2b17705)

Bug Fixes

• Remove used of deprecated datetime.datetime.utcnow() and datetime.utcfromtimestamp() (4a74d71)
• Use retry_async instead of retry in async client (cae9e46)

Documentation

• Assorted typo fixes and whitespace updates (3a624a9)
• Deprecate google.cloud.firestore_v1.rate_limiter.utcnow (4a74d71)

v2.13.1

Compare Source

Bug Fixes

• Order normalization with descending query (#​788) (dbe8ef7)

v2.13.0

Compare Source

Features

• Sum/Avg aggregation queries (#​715) (443475b)

Bug Fixes

• Ensure transactions rollback on failure (#​767) (cdaf25b)
• Improve AsyncQuery typing (#​782) (ae1247b)

Documentation

• Minor formatting (41b5ea0)

v2.12.0

Compare Source

Features

• Add ApiScope and COLLECTION_RECURSIVE query_scope for Firestore index (#​718) (d8de142)
• Add bloom filter related proto fields (#​710) (26ac1cf)
• Add CreateDatabase API (#​724) (64e4404)
• Multi db test parametrization (#​717) (91fc8bb)
• Publish proto definitions for SUM/AVG in Firestore (#​746) (ccadec5)

Bug Fixes

• Add async context manager return types (#​732) (2d42731)

Documentation

• Minor formatting and grammar (eb4fe8e)

googleapis/python-logging (google-cloud-logging)

v3.12.1

Compare Source

Bug Fixes

• Make logging handler close conditional to having the transport opened (#​990) (66c6b91)

v3.12.0

Compare Source

Features

• Add REST Interceptors which support reading metadata (681bcc5)
• Add support for opt-in debug logging (681bcc5)
• Added flushes/close functionality to logging handlers (#​917) (d179304)

Bug Fixes

• Allow protobuf 6.x (#​977) (6757890)
• deps: Require google-cloud-audit-log >= 0.3.1 (#​979) (1cc00ec)
• Fix typing issue with gRPC metadata when key ends in -bin (681bcc5)

Documentation

• Added documentation on log_level and excluded_loggers params in setup_logging (#​971) (70d9d25)
• Update README to break infinite redirect loop (#​972) (52cd907)

v3.11.4

Compare Source

Bug Fixes

• Made write_entries raise ValueError on ParseErrors (#​958) (5309478)
• Require proto-plus >= 1.25 for Python 3.13 (#​955) (7baed8e)
• Require proto-plus >= 1.25 for Python 3.13 (#​955) (002b1fc)

v3.11.3

Compare Source

Bug Fixes

• 16-bit hexadecimal formatting for XCTC span IDs (#​946) (1f2b190)

v3.11.2

Compare Source

Bug Fixes

• deps: Require google-cloud-appengine-logging>=0.1.3 (550abca)
• deps: Require google-cloud-audit-log >= 0.2.4 (550abca)
• deps: Require opentelemetry-api>=1.9.0 (550abca)
• Fixed type hinting issue with specifying Transport class (#​930) (e2875d6)

v3.11.1

Compare Source

Bug Fixes

• Allow protobuf 5.x (#​888) (7746e64)

v3.11.0

Compare Source

Features

• OpenTelemetry trace/spanID integration for Python handlers (#​889) (78168a3)

Bug Fixes

• Added environment specific labels to client library when running in Cloud Run Jobs (#​877) (9c5e8f0)
• Added missing import into logger.py (#​896) (9ca242d)
• Added type hints to CloudLoggingHandler constructor (#​903) (6959345)

Documentation

• Add summary_overview template (#​878) (b60714c)
• Changed table in web-framework-integration to bulleted list (#​875) (a4aa3a7)
• Documentation update for OpenTelemetry (#​915) (2a0539a)
• Update dictConfig snippet (#​885) (6264107)

v3.10.0

Compare Source

Features

• Allow users to explicitly configure universe domain (#​846) (e998a21)

Bug Fixes

• Added placeholder kwargs to StructuredLogHandler (#​845) (9bc0a37)
• Allowed for a partial override of loggers that get excluded from setup_client (#​831) (870c940)
• Remove usage in including_default_value_fields to prepare for protobuf 5.x (#​866) (66a534d)
• Use value of cluster-location in GKE for tagging location (#​830) (c15847c)

Documentation

• Added documentation for Django/Flask integrations and dictConfig (#​848) (c65ec92)

v3.9.0

Compare Source

Features

• Add support for Python 3.12 (#​813) (6591b53)
• Use native namespaces instead of pkg_resources (#​812) (10ad75d)

Bug Fixes

• Fixed DeprecationWarning for datetime objects for Python 3.12 (#​824) (2384981)
• Fixed object paths in autogenerated code in owlbot.py (#​804) (b14bb14)
• Updated protobuf JSON formatting to support nested protobufs (#​797) (a00c261)
• Use retry_async instead of retry in async client (#​816) (c79f7f5)
• Use warning instead of warn in system tests to avoid DeprecationWarning (#​821) (c447175)

v3.8.0

Compare Source

Features

• Add cloud_run_job monitored resource type. (#​788) (3b310d6)

v3.7.0

Compare Source

Features

• Add ConfigServiceV2.CreateBucketAsync method for creating Log Buckets asynchronously (30f24a8)
• Add ConfigServiceV2.CreateLink method for creating linked datasets for Log Analytics Buckets (30f24a8)
• Add ConfigServiceV2.DeleteLink method for deleting linked datasets (30f24a8)
• Add ConfigServiceV2.GetLink methods for describing linked datasets (30f24a8)
• Add Confi

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.