google-auth 2.47.0

2.47.0 (2026-01-06)

Features

• drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4)

Bug Fixes

• Python 3.8 support (#1918) (60dc2001)

google-auth 2.46.0

2.46.0 (2026-01-05)

Features

• Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d5)

Bug Fixes

• Fix test coverage for mtls_helper (#1886) (02e71631)

• use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f)

• add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588)

• fix the document of secure_authorized_session (#1536) (5d001470)

• raise RefreshError for missing token in impersonated credentials (#1897) (94d04e09)

• remove setup.cfg configuration for creating universal wheels (#1693) (c767531c)

Documentation

• update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2)

google-auth 3.0.0.dev0

3.0.0.dev0 (2025-12-18)

Bug Fixes

• replace rsa dependency with cryptography (#1771) (1c2c49614076b3ed15a29e33b11ffe56a21ef165)

google-auth 2.45.0

2.45.0 (2025-12-15)

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e)

google-auth 2.44.0

2.44.0 (2025-12-12)

Features

• MDS connections use mTLS (#1856) (0387bb95)

• support Python 3.14 (#1822) (0f7097e7)

• add ecdsa p-384 support (#1872) (39c381a5)

• Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cc)

• Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986)

Bug Fixes

• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907)

• Delegate workload cert and key default lookup to helper function (#1877) (b0993c7e)

• Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f)

google-auth 2.43.0

2.43.0 (2025-11-05)

Features

• Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#1859) (1535eccb)

• Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#1848) (395e405b)

• onboard google-auth to librarian (#1838) (c503eaa5)

v2.42.1

2.42.1 (2025-10-30)

Bug Fixes

• Catch ValueError for json.loads() (#1842) (b074cad)

v2.42.0

2.42.0 (2025-10-24)

Features

• Add trust boundary support for external accounts. (#1809) (36ecb1d)

Bug Fixes

• Read scopes from ADC json for impersoanted cred (#1820) (62c0fc8)

v2.41.1

2.41.1 (2025-09-30)

Bug Fixes

• Suppress deprecation warning for ADC (#1815) (751ce3f)

v2.41.0

2.41.0 (2025-09-29)

Features

• Add support for cachetools 6.0 (#1773) (af18060)
• Add trust boundary support for service accounts and impersonation. (#1778) (99be2ce)

Bug Fixes

• Deprecating load_credentials_from_dict (58b66ec)
• Deprecating load_credentials_from_file (58b66ec)
• Fix type error in credentials.py for python 3.7 and 3.8 (#1805) (c30a6a7)

Documentation

• Update user guide to include x509 feature. (#1802) (2d89ab4)