chore(deps): bump google-auth from 2.56.3 to 2.57.1

[dependabot]

Bumps google-auth from 2.56.3 to 2.57.1.

Release notes

Sourced from google-auth's releases.

google-auth: v2.57.1

2.57.1 (2026-09-03)

Bug Fixes

• auth: parse hostname for mTLS and PSC endpoint certificate rotation (#18147) (#18201) (b18bb4c)

google-auth: v2.57.0

2.57.0 (2026-08-21)

Features

• auth: add deprecation warning for grpcio < 1.83.0 (PQC support) (#18070) (68bdaba)

Bug Fixes

• auth: parse hostname for mTLS and PSC endpoint certificate rotat… (#18153) (b642373)
• auth: prevent TypeError and support home-dir cert fallback for X… (#18016) (b9a1379)

Documentation

• handwritten: centralize CONTRIBUTING.rst pointers (#17642) (23b9499)

Commits

• 036f734 chore: release main (#18276)
• a700117 chore(main): release google-shopping-merchant-loyaltycustomers 0.1.1 (#18283)
• ffa6e54 fix: correct client version strings (#18282)
• b3d76b9 chore(main): release google-shopping-merchant-loyaltycustomers 0.1.0 (#18278)
• 492a0e3 feat(google/shopping/merchant/loyaltycustomers/v1): add google-shopping-merch...
• b18bb4c fix(auth): parse hostname for mTLS and PSC endpoint certificate rotation (#18...
• ad2ef26 chore: release main (#18221)
• 182ff9f feat: add send and ack mutations Cloud Spanner Queues (#17728)
• 2d8093e chore(spanner): use nam6 instance config for test_create_instance_partition (...
• 7126a54 feat(bigtable): Rerouted DirectRow.commit to use mutate_row (#18191)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Review

This is a routine Dependabot version bump — google-auth 2.56.3 → 2.57.1 in requirements/production.txt (1 line changed, no application code touched).

Assessment:

• Code quality / correctness: N/A — no source code changes, just a pinned version bump.
• Bugs: None expected. This is a minor version update (per the PR's semver-minor label), and the release notes list only a bug fix (mTLS/PSC hostname parsing for cert rotation) and a deprecation warning for grpcio < 1.83.0, no breaking API changes.
• Security: This bump is generally positive for security posture (dependency freshness), and Dependabot didn't flag it as a security advisory fix specifically, so this looks like a routine minor-version update rather than a CVE patch.
• Performance: No expected impact.
• Test coverage: No app tests are needed for this change itself, but since google-auth backs GCP-related integrations in this codebase (e.g., Document AI/GCS usage per the changelog reference), it would be worth confirming CI passes end-to-end (in particular any GCP-related pipeline/parser tests) before merging, given the new deprecation warning around grpcio < 1.83.0 — worth a quick check that the pinned grpcio version in this repo doesn't fall below that threshold to avoid noisy deprecation warnings in logs.

No blocking issues. Safe to merge once CI is green.