chore(deps): bump the pip group across 19 directories with 11 updates

Bumps the pip group with 4 updates in the /composer/airflow_1_samples directory: [flask](https://github.com/pallets/flask), [werkzeug](https://github.com/pallets/werkzeug), [cryptography](https://github.com/pyca/cryptography) and [protobuf](https://github.com/protocolbuffers/protobuf). Bumps the pip group with 8 updates in the /composer/cicd_sample directory: | Package | From | To | | --- | --- | --- | | [apache-airflow](https://github.com/apache/airflow) | `2.6.3` | `3.2.0b1` | | [flask](https://github.com/pallets/flask) | `2.2.5` | `3.1.3` | | [werkzeug](https://github.com/pallets/werkzeug) | `2.2.3` | `3.1.6` | | [black](https://github.com/psf/black) | `23.1a1` | `26.3.1` | | [cryptography](https://github.com/pyca/cryptography) | `40.0.2` | `46.0.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `4.23.4` | `5.29.6` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.33.0` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.27.1` | `1.133.0` | Bumps the pip group with 1 update in the /composer/rest directory: [requests](https://github.com/psf/requests). Bumps the pip group with 8 updates in the /composer/workflows directory: | Package | From | To | | --- | --- | --- | | [apache-airflow](https://github.com/apache/airflow) | `2.9.2` | `3.2.0b1` | | [flask](https://github.com/pallets/flask) | `2.2.5` | `3.1.3` | | [werkzeug](https://github.com/pallets/werkzeug) | `2.2.3` | `3.1.6` | | [black](https://github.com/psf/black) | `24.4.2` | `26.3.1` | | [cryptography](https://github.com/pyca/cryptography) | `41.0.7` | `46.0.7` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `4.25.3` | `5.29.6` | | [requests](https://github.com/psf/requests) | `2.31.0` | `2.33.0` | | [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) | `1.53.0` | `1.133.0` | Bumps the pip group with 1 update in the /compute/auth directory: [requests](https://github.com/psf/requests). Bumps the pip group with 1 update in the /compute/client_library directory: [black](https://github.com/psf/black). Bumps the pip group with 2 updates in the /compute/encryption directory: [cryptography](https://github.com/pyca/cryptography) and [requests](https://github.com/psf/requests). Bumps the pip group with 1 update in the /compute/metadata directory: [requests](https://github.com/psf/requests). Bumps the pip group with 1 update in the /compute/oslogin directory: [requests](https://github.com/psf/requests). Bumps the pip group with 3 updates in the /dataflow/gemma directory: [protobuf](https://github.com/protocolbuffers/protobuf), [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform) and [keras](https://github.com/keras-team/keras). Bumps the pip group with 1 update in the /dataflow/gemma-flex-template directory: [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform). Bumps the pip group with 3 updates in the /dataflow/run-inference directory: [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform), [torch](https://github.com/pytorch/pytorch) and [transformers](https://github.com/huggingface/transformers). Bumps the pip group with 1 update in the /dataflow/run_template directory: [flask](https://github.com/pallets/flask). Bumps the pip group with 2 updates in the /datastore/cloud-ndb directory: [flask](https://github.com/pallets/flask) and [werkzeug](https://github.com/pallets/werkzeug). Bumps the pip group with 2 updates in the /dialogflow directory: [flask](https://github.com/pallets/flask) and [werkzeug](https://github.com/pallets/werkzeug). Bumps the pip group with 2 updates in the /dialogflow-cx directory: [flask](https://github.com/pallets/flask) and [werkzeug](https://github.com/pallets/werkzeug). Bumps the pip group with 2 updates in the /gemma2 directory: [protobuf](https://github.com/protocolbuffers/protobuf) and [google-cloud-aiplatform](https://github.com/googleapis/python-aiplatform). Bumps the pip group with 4 updates in the /iap directory: [flask](https://github.com/pallets/flask), [werkzeug](https://github.com/pallets/werkzeug), [cryptography](https://github.com/pyca/cryptography) and [requests](https://github.com/psf/requests). Bumps the pip group with 1 update in the /media_cdn directory: [cryptography](https://github.com/pyca/cryptography). Updates `flask` from 1.1.2 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 0.16.1 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `cryptography` from 3.2.1 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@3.2.1...46.0.7) Updates `protobuf` from 3.14.0 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `apache-airflow` from 2.6.3 to 3.2.0b1 - [Release notes](https://github.com/apache/airflow/releases) - [Changelog](https://github.com/apache/airflow/blob/main/docker-stack-docs/changelog.rst) - [Commits](apache/airflow@2.6.3...3.2.0b1) Updates `flask` from 2.2.5 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 2.2.3 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `black` from 23.1a1 to 26.3.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](https://github.com/psf/black/commits/26.3.1) Updates `cryptography` from 40.0.2 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@3.2.1...46.0.7) Updates `protobuf` from 4.23.4 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `requests` from 2.31.0 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `google-cloud-aiplatform` from 1.27.1 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.27.1...v1.133.0) Updates `requests` from 2.32.2 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `apache-airflow` from 2.9.2 to 3.2.0b1 - [Release notes](https://github.com/apache/airflow/releases) - [Changelog](https://github.com/apache/airflow/blob/main/docker-stack-docs/changelog.rst) - [Commits](apache/airflow@2.6.3...3.2.0b1) Updates `flask` from 2.2.5 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 2.2.3 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `black` from 24.4.2 to 26.3.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](https://github.com/psf/black/commits/26.3.1) Updates `cryptography` from 41.0.7 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@3.2.1...46.0.7) Updates `protobuf` from 4.25.3 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `requests` from 2.31.0 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `google-cloud-aiplatform` from 1.53.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.27.1...v1.133.0) Updates `requests` from 2.32.4 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `black` from 24.10.0 to 26.3.1 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](https://github.com/psf/black/commits/26.3.1) Updates `cryptography` from 45.0.1 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@3.2.1...46.0.7) Updates `requests` from 2.32.4 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `requests` from 2.32.4 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `requests` from 2.32.4 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `protobuf` from 4.25.0 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `google-cloud-aiplatform` from 1.49.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.27.1...v1.133.0) Updates `keras` from 3.0.5 to 3.13.2 - [Release notes](https://github.com/keras-team/keras/releases) - [Commits](keras-team/keras@v3.0.5...v3.13.2) Updates `google-cloud-aiplatform` from 1.62.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.27.1...v1.133.0) Updates `google-cloud-aiplatform` from 1.57.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.27.1...v1.133.0) Updates `torch` from 2.2.2 to 2.8.0 - [Release notes](https://github.com/pytorch/pytorch/releases) - [Changelog](https://github.com/pytorch/pytorch/blob/main/RELEASE.md) - [Commits](pytorch/pytorch@v2.2.2...v2.8.0) Updates `transformers` from 4.38.0 to 5.0.0rc3 - [Release notes](https://github.com/huggingface/transformers/releases) - [Commits](huggingface/transformers@v4.38.0...v5.0.0rc3) Updates `flask` from 3.0.3 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `flask` from 3.0.3 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 3.0.6 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `flask` from 3.0.3 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 3.0.6 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `flask` from 3.0.3 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 3.0.6 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `protobuf` from 5.29.5 to 5.29.6 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `google-cloud-aiplatform` from 1.64.0 to 1.133.0 - [Release notes](https://github.com/googleapis/python-aiplatform/releases) - [Changelog](https://github.com/googleapis/python-aiplatform/blob/main/CHANGELOG.md) - [Commits](googleapis/python-aiplatform@v1.27.1...v1.133.0) Updates `flask` from 3.0.3 to 3.1.3 - [Release notes](https://github.com/pallets/flask/releases) - [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst) - [Commits](pallets/flask@1.1.2...3.1.3) Updates `werkzeug` from 3.0.3 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@0.16.1...3.1.6) Updates `cryptography` from 45.0.1 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@3.2.1...46.0.7) Updates `requests` from 2.32.4 to 2.33.0 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.31.0...v2.33.0) Updates `cryptography` from 45.0.1 to 46.0.7 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@3.2.1...46.0.7) --- updated-dependencies: - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: apache-airflow dependency-version: 3.2.0b1 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: apache-airflow dependency-version: 3.2.0b1 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: black dependency-version: 26.3.1 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: keras dependency-version: 3.13.2 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: torch dependency-version: 2.8.0 dependency-type: direct:production dependency-group: pip - dependency-name: transformers dependency-version: 5.0.0rc3 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: protobuf dependency-version: 5.29.6 dependency-type: direct:production dependency-group: pip - dependency-name: google-cloud-aiplatform dependency-version: 1.133.0 dependency-type: direct:production dependency-group: pip - dependency-name: flask dependency-version: 3.1.3 dependency-type: direct:production dependency-group: pip - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip - dependency-name: requests dependency-version: 2.33.0 dependency-type: direct:production dependency-group: pip - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>
CVSz · dependabot · Apr 8, 2026 · Apr 8, 2026 · 8578cf1ddca588b3dd865b1ed30f10e496adcc5f
commit 8578cf1ddca588b3dd865b1ed30f10e496adcc5f
diff --git a/composer/airflow_1_samples/constraints.txt b/composer/airflow_1_samples/constraints.txt
@@ -10,7 +10,7 @@ Flask-Login==0.4.1
 Flask-OpenID==1.3.0
 Flask-SQLAlchemy==2.4.4
 Flask-WTF==0.14.3
-Flask==1.1.2
+Flask==3.1.3
 GitPython==3.1.11
 JPype1==0.7.1
 JayDeBeApi==1.2.3
@@ -30,7 +30,7 @@ SQLAlchemy==1.3.20
 Sphinx==3.3.1
 Unidecode==1.1.1
 WTForms==2.3.3
-Werkzeug==0.16.1
+Werkzeug==3.1.6
 adal==1.2.5
 aiohttp==3.7.3
 alabaster==0.7.12
@@ -95,7 +95,7 @@ colorlog==4.0.2
 configparser==3.5.3
 coverage==5.3
 croniter==0.3.36
-cryptography==3.2.1
+cryptography==46.0.7
 cx-Oracle==8.0.1
 datadog==0.39.0
 decorator==4.4.2
@@ -239,7 +239,7 @@ prison==0.1.3
 prometheus-client==0.8.0
 prompt-toolkit==3.0.8
 proto-plus==1.11.0
-protobuf==3.14.0
+protobuf==5.29.6
 psutil==5.7.3
 psycopg2-binary==2.8.6
 ptyprocess==0.6.0

diff --git a/composer/cicd_sample/constraints.txt b/composer/cicd_sample/constraints.txt
@@ -43,7 +43,7 @@ Flask-Login==0.6.2
 Flask-SQLAlchemy==2.5.1
 Flask-Session==0.5.0
 Flask-WTF==1.1.1
-Flask==2.2.5
+Flask==3.1.3
 GitPython==3.1.31
 JPype1==1.4.1
 JayDeBeApi==1.2.3
@@ -64,7 +64,7 @@ SecretStorage==3.3.3
 Shapely==1.8.5.post1
 Sphinx==5.3.0
 WTForms==3.0.1
-Werkzeug==2.2.3
+Werkzeug==3.1.6
 adal==1.2.7
 aiobotocore==2.5.2
 aiofiles==23.1.0
@@ -205,7 +205,7 @@ bcrypt==4.0.1
 beautifulsoup4==4.12.2
 billiard==4.1.0
 bitarray==2.7.6
-black==23.1a1
+black==26.3.1
 bleach==6.0.0
 blinker==1.6.2
 boto3==1.26.161
@@ -241,7 +241,7 @@ coverage==7.2.7
 crcmod==1.7
 cron-descriptor==1.4.0
 croniter==1.4.1
-cryptography==40.0.2
+cryptography==46.0.7
 curlify==2.2.1
 dask==2023.4.1
 databricks-sql-connector==2.7.0
@@ -292,7 +292,7 @@ google-api-python-client==2.92.0
 google-auth-httplib2==0.1.0
 google-auth-oauthlib==1.0.0
 google-auth==2.21.0
-google-cloud-aiplatform==1.27.1
+google-cloud-aiplatform==1.133.0
 google-cloud-appengine-logging==1.3.1
 google-cloud-audit-log==0.2.5
 google-cloud-automl==2.11.2
@@ -483,7 +483,7 @@ prison==0.2.1
 prometheus-client==0.17.0
 prompt-toolkit==3.0.39
 proto-plus==1.22.3
-protobuf==4.23.4
+protobuf==5.29.6
 psutil==5.9.5
 psycopg2-binary==2.9.6
 ptyprocess==0.7.0
@@ -553,7 +553,7 @@ requests-mock==1.11.0
 requests-ntlm==1.2.0
 requests-oauthlib==1.3.1
 requests-toolbelt==1.0.0
-requests==2.31.0
+requests==2.33.0
 responses==0.23.1
 rfc3339-validator==0.1.4
 rfc3986==1.5.0

diff --git a/composer/cicd_sample/requirements.txt b/composer/cicd_sample/requirements.txt
@@ -1,3 +1,3 @@
 # be sure to update the constraints file to match
 # see https://airflow.apache.org/docs/apache-airflow/stable/installation/installing-from-pypi.html#constraints-files
-apache-airflow==2.6.3
+apache-airflow==3.2.0b1
diff --git a/composer/cicd_sample/utils/requirements-test.txt b/composer/cicd_sample/utils/requirements-test.txt
@@ -1,4 +1,4 @@
 pytest==8.2.0
-requests==2.31.0
+requests==2.33.0
 google-api-core==2.17.1
 google-resumable-media==2.7.2
diff --git a/composer/dag_test_utils/setup.py b/composer/dag_test_utils/setup.py
@@ -33,5 +33,5 @@
     long_description_content_type="text/markdown",
     packages=find_packages(),
     py_modules=["internal_unit_testing"],
-    install_requires=["apache-airflow[google] >= 2.0.0, < 3.0.0"],
+    install_requires=["apache-airflow[google] >= 2.0.0, < 4.0.0"],
 )
diff --git a/composer/rest/composer2/requirements-test.txt b/composer/rest/composer2/requirements-test.txt
@@ -1,2 +1,2 @@
 pytest==8.2.0
-requests==2.32.2
+requests==2.33.0
diff --git a/composer/rest/composer2/requirements.txt b/composer/rest/composer2/requirements.txt
@@ -1,2 +1,2 @@
 google-auth==2.38.0
-requests==2.32.2
+requests==2.33.0
diff --git a/composer/rest/requirements.txt b/composer/rest/requirements.txt
@@ -1,3 +1,3 @@
 google-auth==2.38.0
-requests==2.32.4
+requests==2.33.0
 six==1.16.0
diff --git a/composer/workflows/constraints.txt b/composer/workflows/constraints.txt
@@ -45,7 +45,7 @@ Flask-Login==0.6.3
 Flask-SQLAlchemy==2.5.1
 Flask-Session==0.5.0
 Flask-WTF==1.2.1
-Flask==2.2.5
+Flask==3.1.3
 GitPython==3.1.43
 JPype1==1.5.0
 JayDeBeApi==1.2.3
@@ -67,7 +67,7 @@ SQLAlchemy==1.4.52
 SecretStorage==3.3.3
 Sphinx==5.3.0
 WTForms==3.1.2
-Werkzeug==2.2.3
+Werkzeug==3.1.6
 adal==1.2.7
 adlfs==2024.4.1
 aiobotocore==2.13.0
@@ -231,7 +231,7 @@ bcrypt==4.1.3
 beautifulsoup4==4.12.3
 billiard==4.2.0
 bitarray==2.9.2
-black==24.4.2
+black==26.3.1
 blinker==1.8.2
 boto3==1.34.106
 botocore==1.34.106
@@ -266,7 +266,7 @@ coverage==7.5.3
 crcmod==1.7
 cron-descriptor==1.4.3
 croniter==2.0.5
-cryptography==41.0.7
+cryptography==46.0.7
 curlify==2.2.1
 databricks-sql-connector==2.9.6
 datadog==0.49.1
@@ -317,7 +317,7 @@ google-api-python-client==2.132.0
 google-auth-httplib2==0.2.0
 google-auth-oauthlib==1.2.0
 google-auth==2.29.0
-google-cloud-aiplatform==1.53.0
+google-cloud-aiplatform==1.133.0
 google-cloud-appengine-logging==1.4.3
 google-cloud-audit-log==0.2.5
 google-cloud-automl==2.13.3
@@ -534,7 +534,7 @@ prison==0.2.1
 prometheus_client==0.20.0
 prompt_toolkit==3.0.46
 proto-plus==1.23.0
-protobuf==4.25.3
+protobuf==5.29.6
 psutil==5.9.8
 psycopg2-binary==2.9.9
 ptyprocess==0.7.0
@@ -605,7 +605,7 @@ requests-mock==1.12.1
 requests-ntlm==1.2.0
 requests-oauthlib==1.3.1
 requests-toolbelt==1.0.0
-requests==2.31.0
+requests==2.33.0
 responses==0.25.0
 restructuredtext_lint==1.4.0
 rfc3339-validator==0.1.4

diff --git a/composer/workflows/requirements.txt b/composer/workflows/requirements.txt
@@ -4,6 +4,6 @@
 # For the complete list of supported provider extras see:
 #		https://github.com/apache/airflow/blob/main/pyproject.toml
 
-apache-airflow[amazon,apache.beam,cncf.kubernetes,google,microsoft.azure,openlineage,postgres]==2.9.2
+apache-airflow[amazon,apache.beam,cncf.kubernetes,google,microsoft.azure,openlineage,postgres]==3.2.0b1
 google-cloud-dataform==0.5.9  # Used in Dataform operators
 scipy==1.14.1
diff --git a/compute/auth/requirements.txt b/compute/auth/requirements.txt
@@ -1,4 +1,4 @@
-requests==2.32.4
+requests==2.33.0
 google-auth==2.38.0
 google-auth-httplib2==0.2.0
 google-cloud-storage==2.9.0
diff --git a/compute/client_library/requirements.txt b/compute/client_library/requirements.txt
@@ -1,5 +1,5 @@
 isort==6.0.0; python_version > "3.9"
 isort==5.13.2; python_version <= "3.8"
 black==24.8.0; python_version < "3.9"
-black==24.10.0; python_version >= "3.9"
+black==26.3.1; python_version >= "3.9"
 google-cloud-compute==1.19.1
diff --git a/compute/encryption/requirements.txt b/compute/encryption/requirements.txt
@@ -1,5 +1,5 @@
-cryptography==45.0.1
-requests==2.32.4
+cryptography==46.0.7
+requests==2.33.0
 google-api-python-client==2.131.0
 google-auth==2.38.0
 google-auth-httplib2==0.2.0
diff --git a/compute/metadata/requirements.txt b/compute/metadata/requirements.txt
@@ -1,2 +1,2 @@
-requests==2.32.4
+requests==2.33.0
 google-auth==2.38.0
diff --git a/compute/oslogin/requirements.txt b/compute/oslogin/requirements.txt
@@ -3,4 +3,4 @@ google-auth==2.38.0
 google-auth-httplib2==0.2.0
 google-cloud-compute==1.11.0
 google-cloud-os-login==2.15.1
-requests==2.32.4
+requests==2.33.0
diff --git a/dataflow/gemma-flex-template/requirements-test.txt b/dataflow/gemma-flex-template/requirements-test.txt
@@ -1,4 +1,4 @@
-google-cloud-aiplatform==1.62.0
+google-cloud-aiplatform==1.133.0
 google-cloud-dataflow-client==0.8.14
 google-cloud-pubsub==2.28.0
 google-cloud-storage==2.18.2

diff --git a/dataflow/gemma/requirements-test.txt b/dataflow/gemma/requirements-test.txt
@@ -1,4 +1,4 @@
-google-cloud-aiplatform==1.49.0
+google-cloud-aiplatform==1.133.0
 google-cloud-dataflow-client==0.8.10
 google-cloud-storage==2.16.0
 pytest==7.4.0

diff --git a/dataflow/gemma/requirements.txt b/dataflow/gemma/requirements.txt
@@ -1,4 +1,4 @@
 apache_beam[gcp]==2.54.0
-protobuf==4.25.0
+protobuf==5.29.6
 keras_nlp==0.8.2
-keras==3.0.5
+keras==3.13.2
diff --git a/dataflow/run-inference/requirements-test.txt b/dataflow/run-inference/requirements-test.txt
@@ -1,4 +1,4 @@
-google-cloud-aiplatform==1.57.0
+google-cloud-aiplatform==1.133.0
 google-cloud-dataflow-client==0.8.14
 google-cloud-storage==2.10.0
 pytest==8.2.0
diff --git a/dataflow/run-inference/requirements.txt b/dataflow/run-inference/requirements.txt
@@ -1,3 +1,3 @@
 apache-beam[gcp]==2.49.0
-torch==2.2.2
-transformers==4.38.0
+torch==2.8.0
+transformers==5.0.0rc3
diff --git a/dataflow/run_template/requirements-test.txt b/dataflow/run_template/requirements-test.txt
@@ -1,3 +1,3 @@
 pytest==8.2.0
-flask==3.0.3
+flask==3.1.3
 backoff==2.2.1; python_version >= "3.7"
diff --git a/datastore/cloud-ndb/requirements.txt b/datastore/cloud-ndb/requirements.txt
@@ -1,3 +1,3 @@
 google-cloud-ndb==2.3.4
-Flask==3.0.3
-Werkzeug==3.0.6
+Flask==3.1.3
+Werkzeug==3.1.6
diff --git a/dialogflow-cx/requirements.txt b/dialogflow-cx/requirements.txt
@@ -1,8 +1,8 @@
 google-cloud-dialogflow-cx==2.0.0
-Flask==3.0.3
+Flask==3.1.3
 python-dateutil==2.9.0.post0
 functions-framework==3.9.2
-Werkzeug==3.0.6
+Werkzeug==3.1.6
 termcolor==3.0.0; python_version >= "3.9"
 termcolor==2.4.0; python_version == "3.8"
 pyaudio==0.2.14
diff --git a/dialogflow/requirements.txt b/dialogflow/requirements.txt
@@ -1,6 +1,6 @@
 google-cloud-dialogflow==2.36.0
-Flask==3.0.3
+Flask==3.1.3
 pyaudio==0.2.14
 termcolor==3.0.0
 functions-framework==3.9.2
-Werkzeug==3.0.6
+Werkzeug==3.1.6
diff --git a/gemma2/requirements.txt b/gemma2/requirements.txt
@@ -1,2 +1,2 @@
-google-cloud-aiplatform[all]==1.64.0
-protobuf==5.29.5
+google-cloud-aiplatform[all]==1.133.0
+protobuf==5.29.6
diff --git a/iap/app_engine_app/requirements.txt b/iap/app_engine_app/requirements.txt
@@ -1,2 +1,2 @@
-Flask==3.0.3
-Werkzeug==3.0.3
+Flask==3.1.3
+Werkzeug==3.1.6
diff --git a/iap/requirements.txt b/iap/requirements.txt
@@ -1,9 +1,9 @@
-cryptography==45.0.1
-Flask==3.0.3
+cryptography==46.0.7
+Flask==3.1.3
 google-auth==2.38.0
 gunicorn==23.0.0
-requests==2.32.4
+requests==2.33.0
 requests-toolbelt==1.0.0
-Werkzeug==3.0.6
+Werkzeug==3.1.6
 google-cloud-iam~=2.17.0
 PyJWT~=2.10.1
diff --git a/media_cdn/requirements.txt b/media_cdn/requirements.txt
@@ -1,2 +1,2 @@
 six==1.16.0
-cryptography==45.0.1
+cryptography==46.0.7