NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
PyPI · #71 most downloaded on PyPI
Google Authentication Library
Last release 2 days ago
30 Sep 2026
Ships fairly regularly
a new release about every 2 weeks
Nearly every release is documented
notes for 59 of the last 60 stable releases
3 versions withdrawn
withdrawn after publishing
10 years old
204 releases · first in 2016
Add universe domain support for VM cred
One column per quarter.
Export detect_gce_residency_linux function
Serialize signer keys on __getstate__ for pickling (#1394) (8b783b9), closes #1383
### Bug Fixes * Support urllib3<2.0 versions
Less restrictive content-type header check for google authentication (ignores charset)
Add get_bq_config_path() to _cloud_sdk.py
Nothing published for this version
Add framework for BYOID metrics headers
Add public API load_credentials_from_dict
Fix "AttributeError: 'str' object has no attribute 'get'"
Expose universe_domain for external account creds
Self signed jwt token should be string type
Add smbios check to detect GCE residency
Add useEmailAzp claim for id token iam flow
Do not create new JWT credentials if they make the same claims as the existing.
Print out reauth plugin error and raise if challenge output is None
Experimental service account iam endpoint flow for id token
Read both applicationId and relyingPartyId.
Call gcloud config get project to get project for user cred
AwsCredentials should not call metadata server if security creds and region are retrievable through the environment variables
Introduce a way to provide scopes granted by user
Add token_info_url to external account credentials
Adds new external account authorized user credentials
Fix socket leak in impersonated_credentials (#1123) (b1eb467), closes #1122
2.11.0 (2026-09-29) Features declare Python3.15 support
there was a raise missing for throwing exceptions
### Features * pluggable auth support
### Features * add experimental GDCH support
2.7.0 (2026-09-29) Features declare Python3.15 support
silence TypeError during tear down stage
add additional missing import in _default.py
fix missing import in _default.py
Rename aws imdsv2 url field and update token lifetime
ADC can load an impersonated service account credentials.
### Bug Fixes * urllib3 import
deps: allow cachetools 5.0 for python 3.7+
add clock_skew_in_seconds to verify_token functions
add back python 2.7 for gcloud usage only
ADC with impersonated workforce pools
disable self signed jwt for domain wide delegation
add support for workforce pool credentials
disable warning if quota project id provided to auth.default()
use 'int.to_bytes' rather than deprecated crypto wrapper
normalize AWS paths correctly on windows
service account is able to use a private token endpoint
### ⚠ BREAKING CHANGES * drop support for Python 2.7
Nothing published for this version
Nothing published for this version
support refresh callable on google.oauth2.credentials.Credentials
avoid leaking sub-session created for '_auth_request'
Your coding agent can read these notes before it upgrades. Set up the MCP server →