Bump com.google.auth:google-auth-library-oauth2-http from 1.38.0 to 1.41.0 in /plugins/repository-gcs

[dependabot]

Bumps com.google.auth:google-auth-library-oauth2-http from 1.38.0 to 1.41.0.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Bumped several dependencies to newer stable versions (Google auth libraries, Apache Commons Configuration, CI checkout action).
  • Updated related license checksum artifacts to match new library versions.
  • Routine maintenance only — no functional or public API changes.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

Updates Google auth library dependencies in the GCS repository plugin from 1.38.0 to 1.41.0, replaces corresponding SHA-1 checksum files, and adds a changelog entry; no public API or code behavior changes.

Changes

Cohort / File(s)	Summary
Changelog & build CHANGELOG.md, plugins/repository-gcs/build.gradle	Bumped com.google.auth:google-auth-library-credentials and com.google.auth:google-auth-library-oauth2-http from 1.38.0 to 1.41.0; added changelog entry.
Removed old checksums plugins/repository-gcs/licenses/google-auth-library-credentials-1.38.0.jar.sha1, plugins/repository-gcs/licenses/google-auth-library-oauth2-http-1.38.0.jar.sha1	Deleted SHA-1 files for the 1.38.0 artifacts.
Added new checksums plugins/repository-gcs/licenses/google-auth-library-credentials-1.41.0.jar.sha1, plugins/repository-gcs/licenses/google-auth-library-oauth2-http-1.41.0.jar.sha1	Added SHA-1 files containing checksums for the 1.41.0 artifacts.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

• Inspect plugins/repository-gcs/build.gradle for correct coordinates and ensure no unintended version conflicts.
• Verify the new .sha1 contents match the published artifact checksums and file naming.

Possibly related PRs

• Bump actions/checkout from 5 to 6 #20186 — Bumps actions/checkout v5→v6; related CI tooling change present in the same release batch.
• Bump org.apache.commons:commons-configuration2 from 2.12.0 to 2.13.0 in /test/fixtures/hdfs-fixture #20184 — Bumps org.apache.commons:commons-configuration2 to 2.13.0 in a related fixture; part of coordinated dependency updates.

Suggested reviewers

• msfroh
• jed326

Poem

🐰 A hop, a bump, a tidy swap,
New checksums tucked into the repo top.
Dependencies updated, changelog set free,
The rabbit dances—dependency harmony! 🥕

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description is minimal but appropriate for an automated Dependabot PR; however, it lacks the structured sections (Description, Related Issues, Check List) specified in the repository template.	Add a Description section explaining the purpose of the dependency bump and complete the Related Issues and Check List sections as required by the template.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: bumping the google-auth-library-oauth2-http dependency from 1.38.0 to 1.41.0 in the GCS repository plugin.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependabot/gradle/plugins/repository-gcs/com.google.auth-google-auth-library-oauth2-http-1.41.0

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between c97f647 and d605390.

📒 Files selected for processing (1)

• CHANGELOG.md (1 hunks)

🚧 Files skipped from review as they are similar to previous changes (1)

• CHANGELOG.md

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (21)

• GitHub Check: gradle-check
• GitHub Check: precommit (21, windows-2025, true)
• GitHub Check: precommit (25, ubuntu-24.04-arm)
• GitHub Check: precommit (25, macos-15-intel)
• GitHub Check: precommit (21, windows-latest)
• GitHub Check: assemble (25, ubuntu-24.04-arm)
• GitHub Check: assemble (25, windows-latest)
• GitHub Check: precommit (25, windows-latest)
• GitHub Check: assemble (21, windows-latest)
• GitHub Check: precommit (21, ubuntu-latest)
• GitHub Check: assemble (21, ubuntu-24.04-arm)
• GitHub Check: precommit (25, macos-15)
• GitHub Check: assemble (25, ubuntu-latest)
• GitHub Check: precommit (21, macos-15)
• GitHub Check: assemble (21, ubuntu-latest)
• GitHub Check: precommit (25, ubuntu-latest)
• GitHub Check: precommit (21, ubuntu-24.04-arm)
• GitHub Check: precommit (21, macos-15-intel)
• GitHub Check: dependabot
• GitHub Check: detect-breaking-change
• GitHub Check: Analyze (java)

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

❌ Gradle check result for ab8674a: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

✅ Gradle check result for a75c00b: SUCCESS

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.25%. Comparing base (1aed472) to head (d605390).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #20183      +/-   ##
============================================
- Coverage     73.29%   73.25%   -0.04%     
+ Complexity    71780    71776       -4     
============================================
  Files          5795     5795              
  Lines        328297   328297              
  Branches      47282    47282              
============================================
- Hits         240612   240500     -112     
- Misses        68368    68501     +133     
+ Partials      19317    19296      -21     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

❌ Gradle check result for c97f647: null

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

✅ Gradle check result for d605390: SUCCESS