Bumps [google-auth](https://github.com/googleapis/google-auth-library-python) from 2.42.1 to 2.43.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/googleapis/google-auth-library-python/releases">google-auth's releases</a>.</em></p> <blockquote> <h2>google-auth 2.43.0</h2> <h2><a href="https://github.com/googleapis/google-auth-library-python/compare/v2.42.1...v2.43.0">2.43.0</a> (2025-11-05)</h2> <h3>Features</h3> <ul> <li> <p>Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1859">#1859</a>) (<a href="https://github.com/googleapis/google-auth-library-python/commit/1535eccb">1535eccb</a>)</p> </li> <li> <p>Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1848">#1848</a>) (<a href="https://github.com/googleapis/google-auth-library-python/commit/395e405b">395e405b</a>)</p> </li> <li> <p>onboard <code>google-auth</code> to librarian (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1838">#1838</a>) (<a href="https://github.com/googleapis/google-auth-library-python/commit/c503eaa5">c503eaa5</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md">google-auth's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/googleapis/google-cloud-python/compare/google-auth-v2.42.1...google-auth-v2.43.0">2.43.0</a> (2025-11-05)</h2> <h3>Features</h3> <ul> <li>Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1859">#1859</a>) Add public wrapper for check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected. Also, fix check_use_client_cert to return boolean value. Change <a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1848">#1848</a> added the check_use_client_cert method that helps know if client cert should be used for mTLS connection. However, that was in a private class, thus, created a public wrapper of the same function so that it can be used by python Client Libraries. Also, updated check_use_client_cert to return a boolean value instead of existing string value for better readability and future scope. --------- (<a href="https://github.com/googleapis/google-cloud-python/commit/1535eccbff0ad8f3fd6a9775316ac8b77dca66ba">1535eccbff0ad8f3fd6a9775316ac8b77dca66ba</a>)</li> <li>Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1848">#1848</a>) The Python SDK will use a hybrid approach for mTLS enablement:</li> </ul> <ul> <li>If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set (either true or false), the SDK will respect that setting. This is necessary for test scenarios and users who need to explicitly control mTLS behavior.</li> <li>If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not set, the SDK will automatically enable mTLS only if it detects Managed Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF) certificate sources. In other cases where the variable is not set, mTLS will remain disabled. ** This change also adds the helper method <code>check_use_client_cert</code> and it's unit test, which will be used for checking the criteria for setting the mTLS to true ** This change is only for Auth-Library, other changes will be created for Client-Library use-cases. --------- (<a href="https://github.com/googleapis/google-cloud-python/commit/395e405b64b56ddb82ee639958c2e8056ad2e82b">395e405b64b56ddb82ee639958c2e8056ad2e82b</a>)</li> </ul> <ul> <li>onboard <code>google-auth</code> to librarian (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1838">#1838</a>) This PR onboards <code>google-auth</code> library to the Librarian system. Wait for <a href="https://redirect.github.com/googleapis/google-auth-library-python/pull/1819">googleapis/google-auth-library-python#1819</a>. (<a href="https://github.com/googleapis/google-cloud-python/commit/c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca">c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/89a883824b437e9be0c97309ed36f35e5c071f11"><code>89a8838</code></a> chore: librarian release pull request: 20251105T230735Z (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1863">#1863</a>)</li> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/79564e20cf5644a29a2269dcc91902b023f4afac"><code>79564e2</code></a> chore: update prev version in state (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1862">#1862</a>)</li> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/1535eccbff0ad8f3fd6a9775316ac8b77dca66ba"><code>1535ecc</code></a> feat: Add public wrapper for _mtls_helper.check_use_client_cert which enables...</li> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/54502a73170dbe14f04769463c45c9d940f4999b"><code>54502a7</code></a> chore: update secret (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1860">#1860</a>)</li> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/395e405b64b56ddb82ee639958c2e8056ad2e82b"><code>395e405</code></a> feat: Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MW...</li> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/f2708b282b108713a8a9a04a5c0d58b253ce2217"><code>f2708b2</code></a> chore: secret upadte (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1857">#1857</a>)</li> <li><a href="https://github.com/googleapis/google-auth-library-python/commit/c503eaa511357d7a76cc1e1f1d3a3be2dabd5bca"><code>c503eaa</code></a> feat: onboard <code>google-auth</code> to librarian (<a href="https://redirect.github.com/googleapis/google-auth-library-python/issues/1838">#1838</a>)</li> <li>See full diff in <a href="https://github.com/googleapis/google-auth-library-python/compare/v2.42.1...v2.43.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google-auth&package-manager=pip&previous-version=2.42.1&new-version=2.43.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>