chore(deps): bump google-auth from 2.45.0 to 2.47.0

[dependabot]

Bumps google-auth from 2.45.0 to 2.47.0.

Release notes

Sourced from google-auth's releases.

google-auth 2.47.0

2.47.0 (2026-01-06)

Features

• drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4)

Bug Fixes

• Python 3.8 support (#1918) (60dc2001)

google-auth 2.46.0

2.46.0 (2026-01-05)

Features

• Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d5)

Bug Fixes

• Fix test coverage for mtls_helper (#1886) (02e71631)

• use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f)

• add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588)

• fix the document of secure_authorized_session (#1536) (5d001470)

• raise RefreshError for missing token in impersonated credentials (#1897) (94d04e09)

• remove setup.cfg configuration for creating universal wheels (#1693) (c767531c)

Documentation

• update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2)

Changelog

Sourced from google-auth's changelog.

2.47.0 (2026-01-06)

Features

• drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)

Bug Fixes

• Python 3.8 support (#1918) (60dc20014a35ec4ba71e8065b9a33ecbdbeca97a)

2.46.0 (2026-01-05)

Documentation

• update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2d1014ea1d244a4c3470e52d74d55404b)

Features

• Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d573123e358c347ffa067637f992af61b4)

Bug Fixes

• add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588f7793b59d923a4185c8c07738da618f7)
• fix the document of secure_authorized_session (#1536) (5d0014707fc359782df5ccfcaa75fd372fe9dce3)
• remove setup.cfg configuration for creating universal wheels (#1693) (c767531ce05a89002d109f595187aff1fcaacfb7)
• use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f808809e8abf1141f98d88ab720c3899b)
• raise RefreshError for missing token in impersonated credentials (#1897) (94d04e090fdfc61926dd32bc1d65f8820b9cede5)
• Fix test coverage for mtls_helper (#1886) (02e71631fe275d93825c2e957e830773e75133f7)

Commits

• f32301a chore: librarian release pull request: 20260106T130342Z (#1922)
• 25f4ca6 chore: remove Python 3.7 support (#1919)
• 60dc200 fix: Python 3.8 support (#1918)
• 5c07e1c feat: drop cachetools dependency in favor of simple local implementation (#...
• 2cbc2a2 chore: librarian release pull request: 20260105T122553Z (#1913)
• 5b7b5d8 chore: librarian update image pull request: 20260105T112538Z (#1912)
• 7dbf05a chore: rename _refresh_token to _perform_refresh_token (#1900)
• 855a45a chore(deps): update all dependencies (#1894)
• 77c8bc4 tests: make the TLS tests skip when pyopenssl isn't available (#1873)
• 0b9107d feat: Recognize workload certificate config in has_default_client_cert_source...
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.