chore(deps): update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
aiohappyeyeballs (changelog)	==2.4.6 -> ==2.6.1						minor
aiohttp	==3.11.12 -> ==3.11.18						patch
attrs (changelog)	==25.1.0 -> ==25.3.0						minor
cachetools	==5.5.1 -> ==5.5.2						patch
certifi	==2025.1.31 -> ==2025.4.26						minor
charset-normalizer (changelog)	==3.4.1 -> ==3.4.2						patch
com_google_protobuf	v29.3 -> v30.2					http_archive	major
frozenlist	==1.5.0 -> ==1.6.0						minor
google-api-core	==2.24.1 -> ==2.24.2						patch
google-auth	==2.38.0 -> ==2.40.0						minor
googleapis-common-protos (source)	==1.67.0 -> ==1.70.0						minor
grpc-google-iam-v1	==0.14.0 -> ==0.14.2						patch
grpcio (source)	==1.70.0 -> ==1.71.0						minor
iniconfig	==2.0.0 -> ==2.1.0						minor
libcst (changelog)	==1.6.0 -> ==1.7.0						minor
multidict	==6.1.0 -> ==6.4.3						minor
packaging	==24.2 -> ==25.0						major
propcache	==0.2.1 -> ==0.3.1						minor
proto-plus	==1.26.0 -> ==1.26.1						patch
protobuf	==5.29.3 -> ==6.30.2						major
pyasn1-modules (changelog)	==0.4.1 -> ==0.4.2						patch
pytest (changelog)	==8.3.4 -> ==8.3.5						patch
pytest-asyncio (changelog)	==0.25.3 -> ==0.26.0						minor
python	3.10 -> 3.13					uses-with	minor
rsa	==4.9 -> ==4.9.1						patch
rules_cc	0.0.16 -> 0.1.1					http_archive	minor
typing-extensions (changelog)	==4.12.2 -> ==4.13.2						minor
ubuntu	22.04 -> 24.04					github-runner	major
urllib3 (changelog)	==2.3.0 -> ==2.4.0						minor
yarl	==1.18.3 -> ==1.20.0						minor

---

Release Notes

aio-libs/aiohappyeyeballs (aiohappyeyeballs)

v2.6.1

Compare Source

Bug fixes

• Resolve typeerror on import for python < 3.9.2 (#​151) (2042c82)

v2.6.0

Compare Source

Features

• Publish documentation (#​149) (4235273)

v2.5.0

Compare Source

Features

• Add callback for users to customize socket creation (#​147) (8e1bc6a)

v2.4.8

Compare Source

Bug fixes

• Close runner up sockets in the event there are multiple winners (#​143) (476a05b)

v2.4.7

Compare Source

Bug fixes

• Resolve warnings when running tests (#​144) (e96264a)

aio-libs/aiohttp (aiohttp)

v3.11.18

Compare Source

====================

Bug fixes

• Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

  Related issues and pull requests on GitHub:
  :issue:7686.

• Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

  The problem first appeared in 3.11.17

  Related issues and pull requests on GitHub:
  :issue:10764.

---

v3.11.17

Compare Source

====================

Miscellaneous internal changes

• Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10713.

• Improved web server performance when connection can be reused -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10714.

• Improved performance of the WebSocket reader -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10740.

• Improved performance of the WebSocket reader with large messages -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10744.

---

v3.11.16

Compare Source

====================

Bug fixes

• Replaced deprecated asyncio.iscoroutinefunction with its counterpart from inspect
  -- by :user:layday.

  Related issues and pull requests on GitHub:
  :issue:10634.

• Fixed :class:multidict.CIMultiDict being mutated when passed to :class:aiohttp.web.Response -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10672.

---

v3.11.15

Compare Source

====================

Bug fixes

• Reverted explicitly closing sockets if an exception is raised during create_connection -- by :user:bdraco.

  This change originally appeared in aiohttp 3.11.13

  Related issues and pull requests on GitHub:
  :issue:10464, :issue:10617, :issue:10656.

Miscellaneous internal changes

• Improved performance of WebSocket buffer handling -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10601.

• Improved performance of serializing headers -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10625.

---

v3.11.14

Compare Source

====================

Bug fixes

• Fixed an issue where dns queries were delayed indefinitely when an exception occurred in a trace.send_dns_cache_miss
  -- by :user:logioniz.

  Related issues and pull requests on GitHub:
  :issue:10529.

• Fixed DNS resolution on platforms that don't support socket.AI_ADDRCONFIG -- by :user:maxbachmann.

  Related issues and pull requests on GitHub:
  :issue:10542.

• The connector now raises :exc:aiohttp.ClientConnectionError instead of :exc:OSError when failing to explicitly close the socket after :py:meth:asyncio.loop.create_connection fails -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10551.

• Break cyclic references at connection close when there was a traceback -- by :user:bdraco.

  Special thanks to :user:availov for reporting the issue.

  Related issues and pull requests on GitHub:
  :issue:10556.

• Break cyclic references when there is an exception handling a request -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10569.

Features

• Improved logging on non-overlapping WebSocket client protocols to include the remote address -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10564.

Miscellaneous internal changes

• Improved performance of parsing content types by adding a cache in the same manner currently done with mime types -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10552.

---

v3.11.13

Compare Source

====================

Bug fixes

• Removed a break statement inside the finally block in :py:class:~aiohttp.web.RequestHandler
  -- by :user:Cycloctane.

  Related issues and pull requests on GitHub:
  :issue:10434.

• Changed connection creation to explicitly close sockets if an exception is raised in the event loop's create_connection method -- by :user:top-oai.

  Related issues and pull requests on GitHub:
  :issue:10464.

Packaging updates and notes for downstreams

• Fixed test test_write_large_payload_deflate_compression_data_in_eof_writelines failing with Python 3.12.9+ or 3.13.2+ -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:10423.

Miscellaneous internal changes

• Added human-readable error messages to the exceptions for WebSocket disconnects due to PONG not being received -- by :user:bdraco.

  Previously, the error messages were empty strings, which made it hard to determine what went wrong.

  Related issues and pull requests on GitHub:
  :issue:10422.

---

python-attrs/attrs (attrs)

v25.3.0

Compare Source

Changes

• Restore support for generator-based field_transformers.
  #​1417

v25.2.0

Compare Source

Changes

• Checking mandatory vs non-mandatory attribute order is now performed after the field transformer, since the field transformer may change attributes and/or their order.
  #​1147
• attrs.make_class() now allows for Unicode class names.
  #​1406
• Speed up class creation by 30%-50% by compiling methods only once and using a variety of other techniques.
  #​1407
• The error message if an attribute has both an annotation and a type argument will now disclose what attribute seems to be the problem.
  #​1410

tkem/cachetools (cachetools)

v5.5.2

Compare Source

===================

• Reduce number of @cached lock/unlock operations.

• Improve documentation.

• Update CI environment.

certifi/python-certifi (certifi)

v2025.4.26

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.2

Compare Source

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#​591)
• Improved the overall reliability of the detector with CJK Ideographs. (#​605) (#​587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

protocolbuffers/protobuf (com_google_protobuf)

v30.2: Protocol Buffers v30.2

Compare Source

Announcements

• Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Compiler

• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)

C++

• Remove dllexport attribute on variable definition. (#​20833) (protocolbuffers/protobuf@7831669)
• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)
• Change how we decide which empty string implementation to use. (#​20708) (protocolbuffers/protobuf@221b2a0)

Java

• Remove dllexport attribute on variable definition. (#​20833) (protocolbuffers/protobuf@7831669)
• Add protobuf_maven artifacts to protobuf_maven_dev as well so they can still be referenced correctly using the dev namespace for dev-only targets. (#​20771) (protocolbuffers/protobuf@09b5078)
• Add volatile to featuresResolved (#​20766) (protocolbuffers/protobuf@b7f06f1)
• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)
• Restore custom protobuf maven namespaces to avoid polluting main maven namespace for non-dev dependencies as well. (#​20739) (protocolbuffers/protobuf@f4b0a79)
• Fix Java concurrency issue in feature resolution for old <=3.25.x gencode using lazy feature resolution. (#​20751) (protocolbuffers/protobuf@2dc9f35)
• Fix lite classes in the protobuf-java Maven release to be JDK8 compatible. (#​20843) (protocolbuffers/protobuf@7a4c63b)

Kotlin

• Restore custom protobuf maven namespaces to avoid polluting main maven namespace for non-dev dependencies as well. (#​20739) (protocolbuffers/protobuf@f4b0a79)

Csharp

• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)

Objective-C

• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)

Python

• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)

Ruby

• Restore generator headers in cmake install until the next breaking C++ release (#​20749) (protocolbuffers/protobuf@b69f653)

Other

• Restore JDK8 compatibility in Bazel for libraries with dependencies from Maven (e.g. //java/util) (#​20832) (protocolbuffers/protobuf@da9cadc)

v30.1: Protocol Buffers v30.1

Compare Source

Announcements

• Protobuf News may include additional announcements or pre-announcements for upcoming changes.

Bazel

• Loosen py_proto_library check to be on the import path instead of full directory (i.e. excluding external/module-name prefix). (#​20569) (protocolbuffers/protobuf@3576a1f)

Compiler

• Fix python codegen crash when C++ features are used. (#​20577) (protocolbuffers/protobuf@250c550)

C++

• Fix python codegen crash when C++ features are used. (#​20577) (protocolbuffers/protobuf@250c550)

Java

• Remove Java runtime classes from kotlin release. (#​20607) (protocolbuffers/protobuf@4747628)

Kotlin

• Remove Java runtime classes from kotlin release. (#​20607) (protocolbuffers/protobuf@4747628)

Python

• Fix python codegen crash when C++ features are used. (#​20577) (protocolbuffers/protobuf@250c550)

Other

• Re-add system_python repo alias to MODULE.bazel (#​20662) (protocolbuffers/protobuf@ebb5224)

v30.0: Protocol Buffers v30.0

Compare Source

Announcements

• This version includes breaking changes to: Objective-C, Python, C++.
  • [Objective-C] Remove legacy WKT headers. (protocolbuffers/protobuf@d9caebc)
  • [Objective-C] Remove deprecated apis. (protocolbuffers/protobuf@2a52b90)
  • [Objective-C] Remove support for older generated code. (protocolbuffers/protobuf@cffa590)
  • [Objective-C] Remove GPBUnknownFieldSet. (protocolbuffers/protobuf@2b93422)
  • [Python] Fix closed enum validation under editions (protocolbuffers/protobuf@72b3eda)
  • [Python] Remove deprecated GetDebugString() from protobuf python cpp extension. (protocolbuffers/protobuf@721a452)
  • [Python] Remove deprecated reflection methods (protocolbuffers/protobuf@292f964)
  • [Python] Remove deprecated GetPrototype MessageFactory.GetPrototype(), (protocolbuffers/protobuf@c261b49)
  • [Python] Python nested message class qualname now contains the outer message name. (Previous qualname has the same result with name for nested message that outer message name was not included) (protocolbuffers/protobuf@0720536)
  • [Python] Remove deprecated Python RPC Service Interfaces (protocolbuffers/protobuf@5ba74b1)
  • [Python] Python setdefault behavior change for map field. (protocolbuffers/protobuf@81da6b9)
  • [Python] Remove deprecated py_proto_library macro.
  • [C++] Prohibit using Bazel+MSVC to build protobuf (protocolbuffers/protobuf@117e7bb)
  • [C++] Remove deprecated Arena::CreateMessage. (protocolbuffers/protobuf@d83a536)
  • [C++] Remove CMake submodule support in favor of fetched or installed dependencies. (protocolbuffers/protobuf@3f06ca4)
  • [C++] Flip default behavior for handling cmake dependencies. (protocolbuffers/protobuf@9cc685e)
  • [C++] Add ASAN poisoning after clearing oneof messages on arena. (protocolbuffers/protobuf@54d068e)
  • [C++] Upgrade return type of type_name() and cpp_type_name() from const char* to absl::string_view. (protocolbuffers/protobuf@a9ad51f)
  • [C++] Remove deprecated RepeatedPtrField::ClearedCount(). (protocolbuffers/protobuf@e8e3253)
  • [C++] Upgrade return type of several string returning functions to absl::string_view. (protocolbuffers/protobuf@d1990d9)
  • [C++] Strip ctype from options in C++ (protocolbuffers/protobuf@aebf8b9)
  • [C++] Remove MutableRepeatedFieldRef::Reserve() in reflection (protocolbuffers/protobuf@913f7b0)
  • [C++] Remove deprecated JsonOptions alias. (protocolbuffers/protobuf@e2eb0a1)
  • [C++] Remove deprecated Arena::GetArena. (protocolbuffers/protobuf@30ed452)
• Protobuf News may include additional announcements or pre-announcements for upcoming changes.
• Migration Guide includes migration instructions for breaking changes for this release.

Bazel

• Remove reference to cc_proto_aspect (protocolbuffers/protobuf@fa02f76)
• Remove deprecated bazel/system_python.bzl alias. (protocolbuffers/protobuf@00f108c)

Compiler

• Add notices.h with information about our dependencies' licenses and add --notices flag to protoc to print the contents of that file. (protocolbuffers/protobuf@a7df327)
• Have the protoc CLI properly report any parser warnings. (protocolbuffers/protobuf@cafeaa4)
• Split protoc apart from libprotoc in our cmake configs. (protocolbuffers/protobuf@b4b93b3)
• Begin adding extension numbers to SourceCodeInfo and FileDescriptorSet for tooling purposes. (protocolbuffers/protobuf@9d7236b)
• Fix various unsigned to signed comparison warnings. (#​17212) (protocolbuffers/protobuf@67de087)

C++

• Fixing staleness tests (protocolbuffers/protobuf@6abaf77)
• Add notices.h with information about our dependencies' licenses and add --notices flag to protoc to print the contents of that file. (protocolbuffers/protobuf@a7df327)
• Backport: Remove if_constexpr usage for future Abseil compatibility (#​20488) (protocolbuffers/protobuf@450ee76)
• Add tests for older gcc versions we still support (#​20463) (protocolbuffers/protobuf@0778473)
• Fix a bug in handling of implicit-presence string_view fields. (#​20403) (protocolbuffers/protobuf@81196ac)
• Remove rules_rust dependency from MODULE.bazel for 30.x (#​20310) (protocolbuffers/protobuf@b8248f6)
• Upgrade abseil-cpp to 2025012 and use @​com_google_absl -> @​abseil-cpp and com_google_googletest -> @​googletest canonical BCR names. (#​20295) (protocolbuffers/protobuf@df849cc)
• Replace std::any with a custom solution. (#​20251) (protocolbuffers/protobuf@6250d09)
• Make DebugString print debug output, enable debug markers for debug output (protocolbuffers/protobuf@9a03332)
• Fix missing port_undef (#​20052) (protocolbuffers/protobuf@0644388)
• Use __builtin_expect_with_probability for proto field presence checks. (protocolbuffers/protobuf@e958419)
• Enable meta-tagging for redaction purposes (protocolbuffers/protobuf@1f48795)
• Breaking change: Prohibit using Bazel+MSVC to build protobuf (protocolbuffers/protobuf@117e7bb)
• Breaking change: Upgrade return type of several string returning functions to absl::string_view. (protocolbuffers/protobuf@d1990d9)
• Print the presence probability when analysis is enabled. (protocolbuffers/protobuf@d4ba7ff)
• Split protoc apart from libprotoc in our cmake configs. (protocolbuffers/protobuf@b4b93b3)
• Breaking change: Strip ctype from options in C++ (protocolbuffers/protobuf@aebf8b9)
• Breaking change: Remove MutableRepeatedFieldRef::Reserve() in reflection (protocolbuffers/protobuf@913f7b0)
• Remove stale references to C++14. (protocolbuffers/protobuf@f4cc92c)
• Breaking change: Upgrade return type of type_name() and cpp_type_name() from const char* to absl::string_view. (protocolbuffers/protobuf@a9ad51f)
• Update cmake minimum version to >=3.16. (protocolbuffers/protobuf@21f535c)
• Migrate coded output stream arguments from const std::string& to absl::string_view. (protocolbuffers/protobuf@0361a59)
• Breaking change: Remove deprecated Arena::GetArena. (protocolbuffers/protobuf@30ed452)
• Remove the time (or time-based) entropy being added to Map's seed. (protocolbuffers/protobuf@a7875bb)
• Don't use CLOCK_UPTIME_RAW if it won't be defined (#​16951) (protocolbuffers/protobuf@097dcda)
• Fix DEPENDENCIES in protobuf_generate() to accept multiple values instead of silently dropping (protocolbuffers/protobuf@52887e1)
• Use ABSL_PREDICT_TRUE|FALSE instead of PROTOBUF_PREDICT_TRUE|FALSE. (protocolbuffers/protobuf@fd47730)
• Breaking change: Flip default behavior for handling cmake dependencies. (protocolbuffers/protobuf@9cc685e)
• Use [[maybe_unused]] instead of PROTOBUF_UNUSED. (protocolbuffers/protobuf@a7dd155)
• Use [[nodiscard]] instead of PROTOBUF_NODISCARD (protocolbuffers/protobuf@1ceedf8)
• Breaking change: Remove deprecated JsonOptions alias. (protocolbuffers/protobuf@e2eb0a1)
• Generate internal hasbits for singular proto3 implicit presence fields. (protocolbuffers/protobuf@3e82ed4)
• Add name mangling to nested names that collide with known generated names, like (protocolbuffers/protobuf@f2cf85c)
• Breaking change: Remove deprecated RepeatedPtrField::ClearedCount(). (protocolbuffers/protobuf@e8e3253)
• Breaking change: Add ASAN poisoning after clearing oneof messages on arena. (protocolbuffers/protobuf@54d068e)
• Breaking change: Remove deprecated Arena::CreateMessage. (protocolbuffers/protobuf@d83a536)
• Change DynamicCastMessage to throw a std::bad_cast exception when exceptions (protocolbuffers/protobuf@33bbbeb)
• Fixed a missing check in wire format verification. (protocolbuffers/protobuf@2ac862f)
• Comment change: clarifies that the field/value order is based on textual order in the file, not the order of the enums. (protocolbuffers/protobuf@f92335b)
• Bump minimum C++ version to C++17 after branch cut for v29. (protocolbuffers/protobuf@fe53593)
• Bump abseil dependency version from 2023080.1 to 2024072.0. (protocolbuffers/protobuf@c75095b)
• Breaking change: Remove CMake submodule support in favor of fetched or installed dependencies. (protocolbuffers/protobuf@3f06ca4)
• Support fetching CMake dependencies via -Dprotobuf_FETCH_DEPENDENCIES=ON (protocolbuffers/protobuf@d3735bc)
• Avoid field id comparisons in ExtensionSet serialization in case of single range. (protocolbuffers/protobuf@8f6a7a2)
• Let ArenaStringPtr debug-fail if it ever attempts to clear a default string. (protocolbuffers/protobuf@6c9c12c)
• Fix various unsigned to signed comparison warnings. (#​17212) (protocolbuffers/protobuf@67de087)
• Remove Protobuf-C++.podspec release. (protocolbuffers/protobuf@b204518)

Java

• Split maven dependencies into dev vs local (#​20549) (#​20558) (protocolbuffers/protobuf@a5c906a)
• Refactor TextFormat.Printer.MapEntryAdapter to handle more entry types. This will properly sort map keys for DynamicMessage maps. (protocolbuffers/protobuf@84769d3)
• Re-Expose UnderscoresToCapitalizedCamelCase for plugins in OSS. (protocolbuffers/protobuf@94ae26d)
• Upgrade return type of several string returning functions to absl::string_view. (protocolbuffers/protobuf@d1990d9)
• Fix mishandling of open enum + explicit presence fields. (protocolbuffers/protobuf@0ccd845)
• Disable useShortRepeatedPrimitives for Printer.DEFAULT_DEBUG_FORMAT (protocolbuffers/protobuf@1900cbe)
• Optimize Java gencode version validation (protocolbuffers/protobuf@59a8de6)
• Make Java consistently reject unmatched end-group tag. (protocolbuffers/protobuf@a4d4bfe)
• Make Java-lite reject unmatched end-group tag. (protocolbuffers/protobuf@84e81cf)
• Fix handling of implicit field presence in mergeFrom to match the behavior in other places. (protocolbuffers/protobuf@3e0f82e)
• Use ABSL_PREDICT_TRUE|FALSE instead of PROTOBUF_PREDICT_TRUE|FALSE. (protocolbuffers/protobuf@fd47730)
• Use [[maybe_unused]] instead of PROTOBUF_UNUSED. (protocolbuffers/protobuf@a7dd155)
• Remove deprecation warnings for Timestamp and Duration add/subtract/between that we do not yet have alternatives to. (protocolbuffers/protobuf@f6cddd2)
• Add support to print repeated fields with primitive values using short notation (protocolbuffers/protobuf@b8d3567)
• Fix unexpected NumberFormatException in Durations.parse() by replacing with documented thrown ParseException. (protocolbuffers/protobuf@ee5aa49)
• Give Kotlin jars an OSGi Manifest (#​18812) (protocolbuffers/protobuf@27ddb9c)
• Lite: Remove intermediary dynamicMethod function trampolines (protocolbuffers/protobuf@25724ab53e919a5ef68782745d30

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.