Reality2byte · dependabot · Mar 26, 2026
diff --git a/alloydb/notebooks/requirements-test.txt b/alloydb/notebooks/requirements-test.txt
@@ -3,4 +3,4 @@ sqlalchemy==2.0.40
 pytest==8.3.3
 ipykernel==6.29.5
 pytest-asyncio==0.24.0
-nbconvert==7.16.6
+nbconvert==7.17.0
diff --git a/appengine/standard/firebase/firenotes/backend/requirements.txt b/appengine/standard/firebase/firenotes/backend/requirements.txt
@@ -1,10 +1,10 @@
 Flask==1.1.4; python_version < '3.0'
-Flask==3.0.0; python_version > '3.0'
+Flask==3.1.3; python_version > '3.0'
 pyjwt==1.7.1; python_version < '3.0'
 flask-cors==6.0.0
 google-auth==2.17.3; python_version < '3.0'
 google-auth==2.17.3; python_version > '3.0'
 requests==2.27.1
 requests-toolbelt==0.10.1
 Werkzeug==1.0.1; python_version < '3.0'
-Werkzeug==3.0.3; python_version > '3.0'
+Werkzeug==3.1.6; python_version > '3.0'
diff --git a/appengine/standard_python3/cloudsql/requirements.txt b/appengine/standard_python3/cloudsql/requirements.txt
@@ -1,4 +1,4 @@
-flask==3.0.0
+flask==3.1.3
 # psycopg2==2.8.4
 # you will need either the binary or the regular - for more info see http://initd.org/psycopg/docs/install.html
 psycopg2-binary==2.9.11

diff --git a/bigquery/remote-function/document/requirements-test.txt b/bigquery/remote-function/document/requirements-test.txt
@@ -1,4 +1,4 @@
-Flask==2.2.2
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-documentai==3.0.1
 pytest==8.2.0
diff --git a/bigquery/remote-function/document/requirements.txt b/bigquery/remote-function/document/requirements.txt
@@ -1,4 +1,4 @@
-Flask==2.2.2
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-documentai==3.0.1
-Werkzeug==2.3.8
+Werkzeug==3.1.6
diff --git a/bigquery/remote-function/translate/requirements-test.txt b/bigquery/remote-function/translate/requirements-test.txt
@@ -1,4 +1,4 @@
-Flask==2.2.2
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-translate==3.18.0
 pytest==8.2.0
diff --git a/bigquery/remote-function/translate/requirements.txt b/bigquery/remote-function/translate/requirements.txt
@@ -1,4 +1,4 @@
-Flask==2.2.2
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-translate==3.18.0
-Werkzeug==2.3.8
+Werkzeug==3.1.6
diff --git a/bigquery/remote-function/vision/requirements-test.txt b/bigquery/remote-function/vision/requirements-test.txt
@@ -1,4 +1,4 @@
-Flask==2.2.2
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-vision==3.8.1
 pytest==8.2.0
diff --git a/bigquery/remote-function/vision/requirements.txt b/bigquery/remote-function/vision/requirements.txt
@@ -1,4 +1,4 @@
-Flask==2.2.2
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-vision==3.8.1
-Werkzeug==2.3.8
+Werkzeug==3.1.6
diff --git a/bigquery_storage/to_dataframe/requirements.txt b/bigquery_storage/to_dataframe/requirements.txt
@@ -4,7 +4,7 @@ google-cloud-bigquery===3.30.0; python_version <= '3.8'
 google-cloud-bigquery==3.35.1; python_version >= '3.9'
 pyarrow===12.0.1; python_version == '3.7'
 pyarrow===17.0.0; python_version == '3.8'
-pyarrow==21.0.0; python_version >= '3.9'
+pyarrow==23.0.1; python_version >= '3.9'
 ipython===7.31.1; python_version == '3.7'
 ipython===8.10.0; python_version == '3.8'
 ipython===8.18.1; python_version == '3.9'

diff --git a/cloud-media-livestream/keypublisher/requirements.txt b/cloud-media-livestream/keypublisher/requirements.txt
@@ -1,4 +1,4 @@
-Flask==2.2.5
+Flask==3.1.3
 functions-framework==3.9.2
 google-cloud-secret-manager==2.21.1
 lxml==5.2.1
@@ -8,4 +8,4 @@ requests==2.32.4
 signxml==4.0.4
 pytest==8.2.0
 pytest-mock==3.14.0
-Werkzeug==3.0.6
+Werkzeug==3.1.6
diff --git a/cloud-sql/mysql/sqlalchemy/requirements.txt b/cloud-sql/mysql/sqlalchemy/requirements.txt
@@ -1,7 +1,7 @@
-Flask==2.2.2
+Flask==3.1.3
 SQLAlchemy==2.0.40
 PyMySQL==1.1.1
 gunicorn==23.0.0
 cloud-sql-python-connector==1.20.0
 functions-framework==3.9.2
-Werkzeug==2.3.8
+Werkzeug==3.1.6
diff --git a/cloud-sql/postgres/sqlalchemy/requirements.txt b/cloud-sql/postgres/sqlalchemy/requirements.txt
@@ -1,7 +1,7 @@
-Flask==2.2.2
+Flask==3.1.3
 pg8000==1.31.5
 SQLAlchemy==2.0.40
 cloud-sql-python-connector==1.20.0
 gunicorn==23.0.0
 functions-framework==3.9.2
-Werkzeug==2.3.8
+Werkzeug==3.1.6
diff --git a/cloud-sql/sql-server/sqlalchemy/requirements.txt b/cloud-sql/sql-server/sqlalchemy/requirements.txt
@@ -1,9 +1,9 @@
-Flask==2.2.2
+Flask==3.1.3
 gunicorn==23.0.0
 python-tds==1.16.0
 pyopenssl==25.0.0
 SQLAlchemy==2.0.40
 cloud-sql-python-connector==1.20.0
 sqlalchemy-pytds==1.0.2
 functions-framework==3.9.2
-Werkzeug==2.3.8
+Werkzeug==3.1.6
diff --git a/cloud_scheduler/snippets/requirements.txt b/cloud_scheduler/snippets/requirements.txt
@@ -1,4 +1,4 @@
-Flask==3.0.3
+Flask==3.1.3
 gunicorn==23.0.0
 google-cloud-scheduler==2.14.1
-Werkzeug==3.1.5
+Werkzeug==3.1.6
diff --git a/composer/2022_airflow_summit/constraints.txt b/composer/2022_airflow_summit/constraints.txt
@@ -43,7 +43,7 @@ Flask-Login==0.6.2
 Flask-SQLAlchemy==2.5.1
 Flask-Session==0.5.0
 Flask-WTF==1.1.1
-Flask==2.2.5
+Flask==3.1.3
 GitPython==3.1.31
 JPype1==1.4.1
 JayDeBeApi==1.2.3
@@ -64,7 +64,7 @@ SecretStorage==3.3.3
 Shapely==1.8.5.post1
 Sphinx==5.3.0
 WTForms==3.0.1
-Werkzeug==2.2.3
+Werkzeug==3.1.6
 adal==1.2.7
 aiobotocore==2.5.2
 aiofiles==23.1.0
@@ -241,7 +241,7 @@ coverage==7.2.7
 crcmod==1.7
 cron-descriptor==1.4.0
 croniter==1.4.1
-cryptography==40.0.2
+cryptography==46.0.5
 curlify==2.2.1
 dask==2023.4.1
 databricks-sql-connector==2.7.0
@@ -292,7 +292,7 @@ google-api-python-client==2.92.0
 google-auth-httplib2==0.1.0
 google-auth-oauthlib==1.0.0
 google-auth==2.21.0
-google-cloud-aiplatform==1.27.1
+google-cloud-aiplatform==1.133.0
 google-cloud-appengine-logging==1.3.1
 google-cloud-audit-log==0.2.5
 google-cloud-automl==2.11.2
@@ -483,7 +483,7 @@ prison==0.2.1
 prometheus-client==0.17.0
 prompt-toolkit==3.0.39
 proto-plus==1.22.3
-protobuf==4.23.4
+protobuf==5.29.6
 psutil==5.9.5
 psycopg2-binary==2.9.6
 ptyprocess==0.7.0
@@ -492,7 +492,7 @@ pure-sasl==0.6.2
 py-partiql-parser==0.3.3
 py4j==0.10.9.7
 pyOpenSSL==23.2.0
-pyarrow==11.0.0
+pyarrow==14.0.1
 pyasn1-modules==0.2.8
 pyasn1==0.4.8
 pycountry==22.3.5

diff --git a/composer/airflow_1_samples/constraints.txt b/composer/airflow_1_samples/constraints.txt
@@ -10,7 +10,7 @@ Flask-Login==0.4.1
 Flask-OpenID==1.3.0
 Flask-SQLAlchemy==2.4.4
 Flask-WTF==0.14.3
-Flask==1.1.2
+Flask==3.1.3
 GitPython==3.1.11
 JPype1==0.7.1
 JayDeBeApi==1.2.3
@@ -30,7 +30,7 @@ SQLAlchemy==1.3.20
 Sphinx==3.3.1
 Unidecode==1.1.1
 WTForms==2.3.3
-Werkzeug==0.16.1
+Werkzeug==3.1.6
 adal==1.2.5
 aiohttp==3.7.3
 alabaster==0.7.12
@@ -95,7 +95,7 @@ colorlog==4.0.2
 configparser==3.5.3
 coverage==5.3
 croniter==0.3.36
-cryptography==3.2.1
+cryptography==46.0.5
 cx-Oracle==8.0.1
 datadog==0.39.0
 decorator==4.4.2
@@ -239,14 +239,14 @@ prison==0.1.3
 prometheus-client==0.8.0
 prompt-toolkit==3.0.8
 proto-plus==1.11.0
-protobuf==3.14.0
+protobuf==5.29.6
 psutil==5.7.3
 psycopg2-binary==2.8.6
 ptyprocess==0.6.0
 py==1.9.0
 pyOpenSSL==20.0.0
 #pyarrow==0.17.1
-pyarrow==1.0.0
+pyarrow==14.0.1
 pyasn1-modules==0.2.8
 pyasn1==0.4.8
 pycodestyle==2.6.0

diff --git a/composer/cicd_sample/constraints.txt b/composer/cicd_sample/constraints.txt
@@ -43,7 +43,7 @@ Flask-Login==0.6.2
 Flask-SQLAlchemy==2.5.1
 Flask-Session==0.5.0
 Flask-WTF==1.1.1
-Flask==2.2.5
+Flask==3.1.3
 GitPython==3.1.31
 JPype1==1.4.1
 JayDeBeApi==1.2.3
@@ -64,7 +64,7 @@ SecretStorage==3.3.3
 Shapely==1.8.5.post1
 Sphinx==5.3.0
 WTForms==3.0.1
-Werkzeug==2.2.3
+Werkzeug==3.1.6
 adal==1.2.7
 aiobotocore==2.5.2
 aiofiles==23.1.0
@@ -241,7 +241,7 @@ coverage==7.2.7
 crcmod==1.7
 cron-descriptor==1.4.0
 croniter==1.4.1
-cryptography==40.0.2
+cryptography==46.0.5
 curlify==2.2.1
 dask==2023.4.1
 databricks-sql-connector==2.7.0
@@ -292,7 +292,7 @@ google-api-python-client==2.92.0
 google-auth-httplib2==0.1.0
 google-auth-oauthlib==1.0.0
 google-auth==2.21.0
-google-cloud-aiplatform==1.27.1
+google-cloud-aiplatform==1.133.0
 google-cloud-appengine-logging==1.3.1
 google-cloud-audit-log==0.2.5
 google-cloud-automl==2.11.2
@@ -483,7 +483,7 @@ prison==0.2.1
 prometheus-client==0.17.0
 prompt-toolkit==3.0.39
 proto-plus==1.22.3
-protobuf==4.23.4
+protobuf==5.29.6
 psutil==5.9.5
 psycopg2-binary==2.9.6
 ptyprocess==0.7.0
@@ -492,7 +492,7 @@ pure-sasl==0.6.2
 py-partiql-parser==0.3.3
 py4j==0.10.9.7
 pyOpenSSL==23.2.0
-pyarrow==11.0.0
+pyarrow==14.0.1
 pyasn1-modules==0.2.8
 pyasn1==0.4.8
 pycountry==22.3.5

diff --git a/composer/workflows/constraints.txt b/composer/workflows/constraints.txt
@@ -45,7 +45,7 @@ Flask-Login==0.6.3
 Flask-SQLAlchemy==2.5.1
 Flask-Session==0.5.0
 Flask-WTF==1.2.1
-Flask==2.2.5
+Flask==3.1.3
 GitPython==3.1.43
 JPype1==1.5.0
 JayDeBeApi==1.2.3
@@ -67,7 +67,7 @@ SQLAlchemy==1.4.52
 SecretStorage==3.3.3
 Sphinx==5.3.0
 WTForms==3.1.2
-Werkzeug==2.2.3
+Werkzeug==3.1.6
 adal==1.2.7
 adlfs==2024.4.1
 aiobotocore==2.13.0
@@ -266,7 +266,7 @@ coverage==7.5.3
 crcmod==1.7
 cron-descriptor==1.4.3
 croniter==2.0.5
-cryptography==41.0.7
+cryptography==46.0.5
 curlify==2.2.1
 databricks-sql-connector==2.9.6
 datadog==0.49.1
@@ -317,7 +317,7 @@ google-api-python-client==2.132.0
 google-auth-httplib2==0.2.0
 google-auth-oauthlib==1.2.0
 google-auth==2.29.0
-google-cloud-aiplatform==1.53.0
+google-cloud-aiplatform==1.133.0
 google-cloud-appengine-logging==1.4.3
 google-cloud-audit-log==0.2.5
 google-cloud-automl==2.13.3
@@ -534,7 +534,7 @@ prison==0.2.1
 prometheus_client==0.20.0
 prompt_toolkit==3.0.46
 proto-plus==1.23.0
-protobuf==4.25.3
+protobuf==5.29.6
 psutil==5.9.8
 psycopg2-binary==2.9.9
 ptyprocess==0.7.0
@@ -544,7 +544,7 @@ py-partiql-parser==0.5.5
 py4j==0.10.9.7
 pyOpenSSL==24.1.0
 pyarrow-hotfix==0.6
-pyarrow==14.0.2
+pyarrow==23.0.1
 pyasn1-modules==0.3.0
 pyasn1==0.5.1
 pycountry==24.6.1

diff --git a/compute/encryption/requirements.txt b/compute/encryption/requirements.txt
@@ -1,4 +1,4 @@
-cryptography==45.0.1
+cryptography==46.0.5
 requests==2.32.4
 google-api-python-client==2.131.0
 google-auth==2.38.0

diff --git a/dataflow/flex-templates/pipeline_with_dependencies/requirements.txt b/dataflow/flex-templates/pipeline_with_dependencies/requirements.txt
@@ -87,7 +87,7 @@ google-auth==2.28.1
     #   google-cloud-vision
 google-auth-httplib2==0.1.1
     # via apache-beam
-google-cloud-aiplatform==1.42.1
+google-cloud-aiplatform==1.133.0
     # via apache-beam
 google-cloud-bigquery==3.17.2
     # via
@@ -218,7 +218,7 @@ proto-plus==1.23.0
     #   google-cloud-spanner
     #   google-cloud-videointelligence
     #   google-cloud-vision
-protobuf==4.25.8
+protobuf==5.29.6
     # via
     #   apache-beam
     #   google-api-core
@@ -238,7 +238,7 @@ protobuf==4.25.8
     #   grpc-google-iam-v1
     #   grpcio-status
     #   proto-plus
-pyarrow==14.0.2
+pyarrow==23.0.1
     # via apache-beam
 pyarrow-hotfix==0.6
     # via apache-beam

diff --git a/dataflow/gemma-flex-template/requirements-test.txt b/dataflow/gemma-flex-template/requirements-test.txt
@@ -1,4 +1,4 @@
-google-cloud-aiplatform==1.62.0
+google-cloud-aiplatform==1.133.0
 google-cloud-dataflow-client==0.8.14
 google-cloud-pubsub==2.28.0
 google-cloud-storage==2.18.2

diff --git a/dataflow/gemma/requirements-test.txt b/dataflow/gemma/requirements-test.txt
@@ -1,4 +1,4 @@
-google-cloud-aiplatform==1.49.0
+google-cloud-aiplatform==1.133.0
 google-cloud-dataflow-client==0.8.10
 google-cloud-storage==2.16.0
 pytest==7.4.0

diff --git a/dataflow/gemma/requirements.txt b/dataflow/gemma/requirements.txt
@@ -1,4 +1,4 @@
 apache_beam[gcp]==2.54.0
-protobuf==4.25.0
+protobuf==5.29.6
 keras_nlp==0.8.2
-keras==3.0.5
+keras==3.13.2
diff --git a/dataflow/run-inference/requirements-test.txt b/dataflow/run-inference/requirements-test.txt
@@ -1,4 +1,4 @@
-google-cloud-aiplatform==1.57.0
+google-cloud-aiplatform==1.133.0
 google-cloud-dataflow-client==0.8.14
 google-cloud-storage==2.10.0
 pytest==8.2.0
diff --git a/dataflow/run-inference/requirements.txt b/dataflow/run-inference/requirements.txt
@@ -1,3 +1,3 @@
 apache-beam[gcp]==2.49.0
-torch==2.2.2
-transformers==4.38.0
+torch==2.8.0
+transformers==4.53.0