chore(deps): Update google-cloud

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.google.cloud.tools.jib	3.5.3 → 3.5.4
com.google.cloud:libraries-bom (source)	26.84.0 → 26.88.0

---

Release Notes

googleapis/google-cloud-java (com.google.cloud:libraries-bom)

v26.86.0

Features

• bigquery-jdbc: implement TypeRegistry and TypeDescriptor (#​13947) (0557e69)
• bigquery: add QueryResultsFormat and ArrowSerializationOptions configurations (#​13942) (ff03e19)
• bigquery: expose StatementType and query execution stats on TableResult (#​14145) (7d16de8)
• bigtable: enable microsecond timestamps in client (#​14057) (57aaf8d)
• bigtable: route single-entry MutateRows through a point-write c… (#​14028) (a403703)
• datastore: add support for request tags (#​13732) (b1f6186)
• ftp: onboard a new library (#​14068) (f41b2d9)
• gax: add ResumableUploadCallable and ResumableUploadCallSettings (#​14052) (a5e26e8)
• google/cloud/biglake/hive/v1: onboard a new library (#​14130) (650c839)
• google/maps/mapmanagement/v2: onboard a new library (#​14131) (7d00726)
• spanner: support user-provided OpenTelemetry for client metrics export (#​13741) (da74dee)
• update API sources and regenerate (#​14000) (9337a93)
• workloadidentity: onboard a new library (#​14060) (ab226ee)

Bug Fixes

• add documentation for insertall api that there's no default retry (#​13953) (1fdb4f1)
• add retry behavior documentation to insertall interface to clarify the behavior (#​14058) (1b8f9e3)
• auth: fix JSpecify nullability in UserAuthorizer and TokenStore (#​14150) (0d5fac0)
• auth: fix remaining nullability in UserAuthorizer and Builder (#​14158) (a51bb8d)
• auth: refine JSpecify nullability for ServiceAccountCredentials and UserCredentials (#​14159) (a929250)
• bigquery-jdbc: enable ITOpenTelemetryTest (#​13991) (fa6641b)
• bigquery-jdbc: pass connection proxy settings to OpenTelemetry exporters (#​14011) (115b9b3)
• bigquery-jdbc: session context propagation when session is enabled (#​14161) (1e74dda)
• bigtable: remove heartbeat miss logging (#​14054) (ec17637)
• deps: update dependency com.google.apis:google-api-services-bigquery to v2-rev20260731-2.0.0 (#​14149) (95f6c38)
• deps: update dependency com.google.cloud:libraries-bom to v26.86.0 (#​14103) (cf5697e)
• gax-httpjson: reduce Conscrypt fallback error to debug level (#​13962) (8236771)
• gax-httpjson: remove unsupported and deprecated PQC named groups (#​14107) (7604971)
• gax: register Conscrypt SSLContext SPI classes for GraalVM reflection (#​14129) (73c0243)
• samples: align native profile junit and surefire versions with shared config (#​14096) (2b84133)
• spanner: add closeAsync to ReadContext and make transaction closing non-blocking (#​14076) (671f892)
• spanner: scope server-timing metrics per call and guard interceptor lifecycle callbacks (#​14053) (f35c570)
• storage: use JsonUtils for StorageObject serialization in resumable writes and read channels (#​13976) (d94922f)

Performance Improvements

• bigquery-jdbc: eliminate dry run to resolve statement type (#​14156) (7109ecd)
• spanner-jdbc: cache commonly used query parameter names (#​14036) (1eb6aa3)
• spanner-jdbc: cache JDBC metadata query strings (#​14041) (31c628f)
• spanner-jdbc: cache positional to named param conversion (#​14034) (30e031b)

Dependencies

• gax-httpjson: upgrade conscrypt-openjdk-uber to 2.6.2 (#​14117) (2f5481a)
• Update gRPC to v1.82.3 (#​13997) (a786107)
• Upgrade gRPC to v1.82.4 (#​14088) (0c482fe)

Documentation

• bigquery-jdbc: add user guide with connection property and custom endpoint reference (#​13878) (2dde172)
• gax: update LRO troubleshooting documentation link (#​14108) (4c5bbae)
• spanner-jdbc: update connection_properties.md documentation (#​14035) (b576fe8)
• spanner: update CHANGELOG.md for releases 6.117.0 through 6.120.0 (#​13970) (2413811)

---

Configuration

📅 Schedule: (in timezone Asia/Seoul)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 1m 30s —— View job

---

🤖 Claude 의존성 영향도 분석

📦 변경점 요약

라이브러리	변경	구분
com.google.cloud:libraries-bom	26.84.0 → 26.88.0	minor (4 versions)
com.google.cloud.tools.jib	3.5.3 → 3.5.4	patch

libraries-bom 주요 변경 내용 (26.84.0 → 26.88.0):

• Storage: StorageObject 직렬화에 JsonUtils 적용 (resumable write/read channel 버그 수정)
• GCS Auth: gax-httpjson에서 PQC named group 제거, Conscrypt SSLContext GraalVM reflection 등록
• gRPC: v1.82.3 → v1.82.4 업그레이드
• BigQuery, Bigtable, Spanner, Datastore 등 q-asker 미사용 서비스 기능 추가·버그 수정 다수

jib 3.5.4 변경 내용:

• Renovate가 lockfile 업데이트에 실패하여 공식 release notes 확인 불가 (patch 업데이트, breaking change 없을 것으로 추정)

---

⚠️ 중요: Lockfile 업데이트 실패

Renovate가 gradle/libs.versions.toml 변경 후 lockfile 재생성에 실패했습니다:

Plugin [id: 'com.vanniktech.dependency.graph.generator', version: '0.8.0'] was not found

com.vanniktech.dependency.graph.generator:0.8.0 플러그인이 Gradle Plugin Repository에서 조회되지 않아 lockfile이 갱신되지 않은 상태입니다. 이 PR을 그대로 머지하면 빌드 시 compileJava 단계에서 lockfile mismatch로 빌드가 실패할 수 있습니다.

---

🎯 Q-Asker 영향도: 🟢 LOW

사용처:

com.google.cloud:libraries-bom (google-cloud-storage만 직접 사용)

• modules/quiz-ai/impl/.../config/GcsClientConfig.java — StorageOptions.getDefaultInstance().getService()로 GCS 클라이언트 빈 등록
• modules/quiz-ai/impl/.../service/support/GeminiFileServiceImpl.java — PDF → GCS 업로드(storage.createFrom), GCS 파일 삭제(storage.delete) — Gemini 파일 URI 생성에 사용

com.google.cloud.tools.jib

• app/build.gradle — Docker 이미지 빌드·푸시 플러그인 (./gradlew jib)
• .github/workflows/cd-prod_deploy.yml — CD 파이프라인에서 ./gradlew jib 호출

예상 영향:

• Storage 버그 수정(resumable write 직렬화)은 createFrom()을 사용하는 당사 업로드 경로와 직접 관련은 낮음 (resumable upload API 아님)
• gRPC 업데이트는 Vertex AI(Gemini) 통신 계층에 영향 가능하나 minor 버전으로 하위 호환 유지
• Jib patch 업데이트는 Docker 이미지 생성에만 영향, 런타임 동작 무관

---

✅ 권장 액션

• 우선: Renovate가 lockfile을 재생성할 수 있도록 PR에서 "rebase/retry" 체크박스를 체크하거나, 수동으로 ./gradlew resolveAndLockAll --write-locks 실행 후 lockfile 커밋
• CI green 확인 (lockfile 수정 후)
• (선택) GCS 업로드가 포함된 퀴즈 생성 시나리오 로컬 동작 확인

---

📋 참고

• Release Notes: PR 본문 참조
• 분석 모델: claude-sonnet-4-6

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties

FAILURE: Build failed with an exception.

* Where:
Build file '/tmp/renovate/repos/github/q-asker/api/build.gradle' line: 3

* What went wrong:
Plugin [id: 'com.vanniktech.dependency.graph.generator', version: '0.8.0'] was not found in any of the following sources:

- Gradle Core Plugins (plugin is not in 'org.gradle' namespace)
- Included Builds (No included builds contain this plugin)
- Plugin Repositories (could not resolve plugin artifact 'com.vanniktech.dependency.graph.generator:com.vanniktech.dependency.graph.generator.gradle.plugin:0.8.0')
  Searched in the following repositories:
    Gradle Central Plugin Repository

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.
> Get more help at https://help.gradle.org.

BUILD FAILED in 16s