chore(deps): upgrade internal core and veneer -api dependency floors

## Description

Upgrade internal core library and handwritten veneer -api dependency floors across the monorepo.

## Impact

Aligns internal dependency ranges with current released #9604 workspace package versions across CI and local builds.

## Changes

- Upgrade internal core/ and @google-cloud/*-api dependency and devDependencies version floors across core/, handwritten/, packages/, librarian.yaml, and root package.json (including gaxios@^8.3.1, gcp-metadata@^9.2.1, google-auth-library@^11.3.1, teeny-request@^11.1.1, and @google-cloud/bigquery-storage@^6.3.0).
- Update .github/actions/pnpm-lockfile-check/action.yaml default link-workspace-packages to false for deterministic frozen-lockfile installs.
- Regenerate pnpm-lock.yaml with link-workspace-packages=false (0 link: entries and 0 airlock-proxy entries) against https://registry.npmjs.org/.

## Testing

- Verified CI=true npx pnpm@10 install --frozen-lockfile --ignore-scripts passes with exit code 0 and grep -c 'link:' pnpm-lock.yaml is 0.
- Verified core/packages/nodejs-googleapis-common, core/packages/gcp-metadata, core/packages/google-auth-library-nodejs, handwritten/firestore, and handwritten/pubsub compile and pass unit tests under JS_RUNTIME=bun without workspace linking.
- Verified strict repository linter checks (GIT_DIFF_ARG=origin/main node ./bin/linter.mjs --strict).

Author: quirogas

.github/actions/pnpm-lockfile-check/action.yaml

@@ -1,10 +1,10 @@
 name: "Check PNPM Lockfile and Install Workspace Dependencies"
-description: "Sets up pnpm and installs workspace dependencies with frozen lockfile check"
+description: "Sets up pnpm, verifies frozen lockfile sync, and links in-repo workspace packages"
 inputs:
   link-workspace-packages:
     description: "Whether to link matching in-repo workspace packages after verifying the frozen lockfile"
     required: false
-    default: "true"
+    default: "false"
 runs:
   using: "composite"
   steps:

core/common/package.json

@@ -34,15 +34,15 @@
     "precompile": "gts clean"
   },
   "dependencies": {
-    "@google-cloud/projectify": "^6.0.0",
-    "@google-cloud/promisify": "^6.0.0",
+    "@google-cloud/projectify": "^6.2.0",
+    "@google-cloud/promisify": "^6.2.0",
     "arrify": "^2.0.0",
     "duplexify": "^4.1.3",
     "extend": "^3.0.2",
-    "google-auth-library": "^11.0.0",
+    "google-auth-library": "^11.3.1",
     "html-entities": "^2.5.2",
-    "retry-request": "^9.0.0",
-    "teeny-request": "^11.0.0"
+    "retry-request": "^9.1.0",
+    "teeny-request": "^11.1.1"
   },
   "devDependencies": {
     "@types/ent": "^2.2.8",
@@ -59,8 +59,8 @@
     "codecov": "^3.8.3",
     "gts": "^6.0.2",
     "jsdoc": "^4.0.4",
-    "jsdoc-fresh": "^6.0.0",
-    "jsdoc-region-tag": "^5.0.0",
+    "jsdoc-fresh": "^6.1.0",
+    "jsdoc-region-tag": "^5.1.0",
     "mocha": "^11.1.0",
     "mv": "^2.1.1",
     "ncp": "^2.0.0",

core/generator/gapic-generator-typescript/package.json

@@ -49,10 +49,10 @@
     "js-yaml": "^4.3.0",
     "long": "^5.3.2",
     "object-hash": "^3.0.0",
-    "proto3-json-serializer": "^4.0.0",
+    "prettier": "^3.3.3",
+    "proto3-json-serializer": "^4.1.0",
     "protobufjs": "^8.6.6",
     "protobufjs-cli": "^2.6.2",
-    "prettier": "^3.3.3",
     "yargs": "^17.7.2"
   },
   "devDependencies": {
@@ -63,9 +63,9 @@
     "@types/object-hash": "^3.0.6",
     "@types/yargs": "^17.0.34",
     "espower-typescript": "^10.0.1",
-    "gapic-node-processing": "^0.2.0",
-    "gapic-tools": "^2.0.0",
-    "google-gax": "^6.0.0",
+    "gapic-node-processing": "^0.3.0",
+    "gapic-tools": "^2.2.0",
+    "google-gax": "^6.12.1",
     "gts": "^6.0.2",
     "mocha": "^11.7.4",
     "nunjucks": "^3.2.4",

core/packages/gapic-node-processing/package.json

@@ -33,7 +33,7 @@
     "@types/yargs": "^17.0.33",
     "c8": "^10.1.3",
     "cross-env": "^7.0.3",
-    "gapic-tools": "^2.0.0",
+    "gapic-tools": "^2.2.0",
     "gts": "^6.0.2",
     "mocha": "^11.1.0",
     "sinon": "21.0.3",
@@ -48,7 +48,7 @@
     "directory": "core/packages/gapic-node-processing"
   },
   "dependencies": {
-    "@google-cloud/storage": "^7.15.2",
+    "@google-cloud/storage": "^8.4.0",
     "@octokit/rest": "^20.0.0",
     "js-yaml": "^4.1.0",
     "nunjucks": "^3.2.4",

core/packages/gax/package.json

@@ -14,17 +14,17 @@
     "@grpc/proto-loader": "^0.8.0",
     "@opentelemetry/api": "^1.9.0",
     "duplexify": "^4.1.3",
-    "google-auth-library": "^11.0.0",
-    "google-logging-utils": "^2.0.0",
+    "google-auth-library": "^11.3.1",
+    "google-logging-utils": "^2.1.0",
     "node-fetch": "^3.3.2",
     "object-hash": "^3.0.0",
-    "proto3-json-serializer": "^4.0.0",
+    "proto3-json-serializer": "^4.1.0",
     "protobufjs": "^7.5.4",
-    "retry-request": "^9.0.0"
+    "retry-request": "^9.1.0"
   },
   "devDependencies": {
     "@babel/plugin-proposal-private-methods": "^7.18.6",
-    "@google-cloud/dialogflow-cx": "^6.0.1",
+    "@google-cloud/dialogflow-cx": "6.0.1",
     "@opentelemetry/sdk-trace-base": "^2.10.0",
     "@types/mocha": "^10.0.10",
     "@types/ncp": "^2.0.8",
@@ -38,12 +38,12 @@
     "codecov": "^3.8.3",
     "execa": "^5.0.0",
     "glob": "10.5.0",
-    "google-proto-files": "^6.0.0",
+    "google-proto-files": "^6.1.0",
     "gts": "^6.0.2",
     "jackspeak": "^3.0.2",
     "jsdoc": "^4.0.4",
-    "jsdoc-fresh": "^6.0.0",
-    "jsdoc-region-tag": "^5.0.0",
+    "jsdoc-fresh": "^6.1.0",
+    "jsdoc-region-tag": "^5.1.0",
     "long": "^5.2.4",
     "lru-cache": "^10.0.0",
     "mkdirp": "^3.0.1",

core/packages/gaxios/package.json

@@ -77,8 +77,8 @@
     "gts": "^6.0.2",
     "is-docker": "^3.0.0",
     "jsdoc": "^4.0.4",
-    "jsdoc-fresh": "^6.0.0",
-    "jsdoc-region-tag": "^5.0.0",
+    "jsdoc-fresh": "^6.1.0",
+    "jsdoc-region-tag": "^5.1.0",
     "karma": "^6.0.0",
     "karma-chrome-launcher": "^3.0.0",
     "karma-coverage": "^2.0.0",
@@ -93,7 +93,7 @@
     "ncp": "^2.0.0",
     "nock": "14.0.5",
     "null-loader": "^4.0.1",
-    "pack-n-play": "^4.0.0",
+    "pack-n-play": "^5.3.0",
     "puppeteer": "^24.0.0",
     "sinon": "21.0.3",
     "stream-browserify": "^3.0.0",

core/packages/gcp-metadata/package.json

@@ -40,12 +40,12 @@
   "author": "Google LLC",
   "license": "Apache-2.0",
   "dependencies": {
-    "gaxios": "^8.3.0",
-    "google-logging-utils": "^2.0.0",
+    "gaxios": "^8.3.1",
+    "google-logging-utils": "^2.1.0",
     "json-bigint": "^1.0.0"
   },
   "devDependencies": {
-    "@google-cloud/functions": "^5.0.0",
+    "@google-cloud/functions": "5.0.0",
     "@types/json-bigint": "^1.0.4",
     "@types/mocha": "^10.0.10",
     "@types/ncp": "^2.0.8",
@@ -58,8 +58,8 @@
     "gcbuild": "^1.3.39",
     "gts": "^6.0.2",
     "jsdoc": "^4.0.4",
-    "jsdoc-fresh": "^6.0.0",
-    "jsdoc-region-tag": "^5.0.0",
+    "jsdoc-fresh": "^6.1.0",
+    "jsdoc-region-tag": "^5.1.0",
     "mocha": "^11.1.0",
     "ncp": "^2.0.0",
     "nock": "^14.0.5",

core/packages/google-auth-library-nodejs/package.json

@@ -23,9 +23,9 @@
   "dependencies": {
     "base64-js": "^1.3.0",
     "ecdsa-sig-formatter": "^1.0.11",
-    "gaxios": "^8.3.0",
-    "gcp-metadata": "^9.0.0",
-    "google-logging-utils": "^2.0.0",
+    "gaxios": "^8.3.1",
+    "gcp-metadata": "^9.2.1",
+    "google-logging-utils": "^2.1.0",
     "jws": "^4.0.0"
   },
   "devDependencies": {
@@ -42,8 +42,8 @@
     "gts": "^6.0.2",
     "is-docker": "^3.0.0",
     "jsdoc": "^4.0.4",
-    "jsdoc-fresh": "^6.0.0",
-    "jsdoc-region-tag": "^5.0.0",
+    "jsdoc-fresh": "^6.1.0",
+    "jsdoc-region-tag": "^5.1.0",
     "karma": "^6.0.0",
     "karma-chrome-launcher": "^3.0.0",
     "karma-coverage": "^2.0.0",

core/packages/google-auth-library-nodejs/samples/package.json

@@ -19,7 +19,7 @@
     "@googleapis/iam": "^34.0.0",
     "google-auth-library": "^11.3.1",
     "dotenv": "^17.0.0",
-    "gaxios": "^7.0.0",
+    "gaxios": "^8.3.1",
     "node-fetch": "^2.3.0",
     "open": "^9.0.0",
     "server-destroy": "^1.0.1",

core/packages/nodejs-googleapis-common/package.json

@@ -37,15 +37,15 @@
   "license": "Apache-2.0",
   "dependencies": {
     "extend": "^3.0.2",
-    "gaxios": "^8.3.0",
-    "google-auth-library": "^11.0.0",
-    "google-logging-utils": "^2.0.0",
+    "gaxios": "^8.3.1",
+    "google-auth-library": "^11.3.1",
+    "google-logging-utils": "^2.1.0",
     "qs": "^6.7.0",
     "url-template": "^2.0.8"
   },
   "devDependencies": {
-    "@googleapis/dialogflow": "^1.0.0",
     "@babel/plugin-proposal-private-methods": "^7.18.6",
+    "@googleapis/dialogflow": "^1.0.0",
     "@types/extend": "^3.0.1",
     "@types/mocha": "^10.0.10",
     "@types/mv": "^2.1.0",
@@ -62,8 +62,8 @@
     "http2spy": "^2.0.0",
     "is-docker": "^3.0.0",
     "jsdoc": "^4.0.4",
-    "jsdoc-fresh": "^6.0.0",
-    "jsdoc-region-tag": "^5.0.0",
+    "jsdoc-fresh": "^6.1.0",
+    "jsdoc-region-tag": "^5.1.0",
     "karma": "^6.0.0",
     "karma-chrome-launcher": "^3.0.0",
     "karma-coverage": "^2.0.0",