Merge branch 'main' into remove_rsa_3

Author: daniel-sanche

.librarian/state.yaml

@@ -1,7 +1,7 @@
 image: us-central1-docker.pkg.dev/cloud-sdk-librarian-prod/images-prod/python-librarian-generator@sha256:b8058df4c45e9a6e07f6b4d65b458d0d059241dd34c814f151c8bf6b89211209
 libraries:
   - id: google-auth
-    version: 2.47.0
+    version: 2.48.0
     last_generated_commit: 102d9f92ac6ed649a61efd9b208e4d1de278e9bb
     apis: []
     source_roots:

CHANGELOG.md

@@ -4,6 +4,25 @@
 
 [1]: https://pypi.org/project/google-auth/#history
 
+## [2.48.0](https://github.com/googleapis/google-auth-library-python/compare/v2.47.0...v2.48.0) (2026-01-22)
+
+
+### Features
+
+* add cryptography as required dependency (#1929) ([52558ae2881b1e6555f6f5c0d76365c15807ead9](https://github.com/googleapis/google-auth-library-python/commit/52558ae2881b1e6555f6f5c0d76365c15807ead9))
+* Support the mTLS IAM domain for Certificate based Access (#1938) ([8dcf91a1b05c85fbbd0bcee78d66e498099102ab](https://github.com/googleapis/google-auth-library-python/commit/8dcf91a1b05c85fbbd0bcee78d66e498099102ab))
+* add configurable GCE Metadata Server retries (#1488) ([454b441b478ec62bbf1a6ad5bceb6c7cbbfd0c37](https://github.com/googleapis/google-auth-library-python/commit/454b441b478ec62bbf1a6ad5bceb6c7cbbfd0c37))
+* honor `NO_GCE_CHECK` environment variable (#1610) ([383c9827536d9376e8248370ce4c2b83e468d027](https://github.com/googleapis/google-auth-library-python/commit/383c9827536d9376e8248370ce4c2b83e468d027))
+
+
+### Bug Fixes
+
+* resolve circular imports (#1942) ([25c1b064545702cbef087cfcd15fbbb6ef1af74f](https://github.com/googleapis/google-auth-library-python/commit/25c1b064545702cbef087cfcd15fbbb6ef1af74f))
+* removes `content-header` from AWS IMDS get request (#1934) ([97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc](https://github.com/googleapis/google-auth-library-python/commit/97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc))
+* detect correct auth when ADC env var is set but empty (#1374) ([bfc07e1050bd0aa86fa3b08cdf70c9b68b5fe6a2](https://github.com/googleapis/google-auth-library-python/commit/bfc07e1050bd0aa86fa3b08cdf70c9b68b5fe6a2))
+* replace deprecated utcfromtimestamp (#1799) ([e431f20cf73ccac71926a23ec454468cea92e053](https://github.com/googleapis/google-auth-library-python/commit/e431f20cf73ccac71926a23ec454468cea92e053))
+* Use `user_verification=preferred` for ReAuth WebAuthn challenge (#1798) ([3f88a24089c4ee6822d510de0db210b54260d873](https://github.com/googleapis/google-auth-library-python/commit/3f88a24089c4ee6822d510de0db210b54260d873))
+
 ## [2.47.0](https://github.com/googleapis/google-auth-library-python/compare/v2.46.0...v2.47.0) (2026-01-06)
 
 

google/auth/version.py

@@ -12,4 +12,4 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-__version__ = "2.47.0"
+__version__ = "2.48.0"

noxfile.py

@@ -33,7 +33,6 @@
 
 DEFAULT_PYTHON_VERSION = "3.14"
 UNIT_TEST_PYTHON_VERSIONS = [
-    "3.7",
     "3.8",
     "3.9",
     "3.10",

testing/constraints-3.7.txt

@@ -0,0 +1,13 @@
+# This constraints file is used to check that lower bounds
+# are correct in setup.py
+# List *all* library dependencies and extras in this file.
+# Pin the version to the lower bound.
+#
+# e.g., if setup.py has "foo >= 1.14.0, < 2.0.0dev",
+# Then this file should have foo==1.14.0
+pyasn1-modules==0.2.1
+setuptools==40.3.0
+cryptography==38.0.3
+aiohttp==3.6.2
+requests==2.20.0
+pyjwt==2.0