chore(deps): lock file maintenance website-backend (#4302)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Confidence |
|---|---|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |  |  |
|
[Flask-Compress](https://redirect.github.com/colour-science/flask-compress)
| project.dependencies | minor | `==1.20` -> `==1.22` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/flask-compress/1.22?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/flask-compress/1.20/1.22?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[google-auth](https://redirect.github.com/googleapis/google-auth-library-python)
| project.dependencies | patch | `==2.42.0` -> `==2.42.1` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/google-auth/2.42.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-auth/2.42.0/2.42.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>colour-science/flask-compress (Flask-Compress)</summary>

###
[`v1.22`](https://redirect.github.com/colour-science/flask-compress/blob/HEAD/CHANGELOG.md#122-2025-11-04)

[Compare
Source](https://redirect.github.com/colour-science/flask-compress/compare/v1.21...v1.22)

- fix possible `RuntimeError` when applying compression to a streaming
endpoint
- no longer apply `make_conditional` to streaming responses, as it had
the effect of buffering the entire response, which defeats the purpose
of streaming responses, unless the `request.endpoint` is in a new
`COMPRESS_STREAMING_ENDPOINT_CONDITIONAL` config option, which defaults
to `["static"]`

> As serving static content with Flask is using *streaming* responses,
we wanted to preserve the correct handling of conditional requests (i.e.
304 Not Modified responses) for static content, while avoiding buffering
the entire response when compressing streaming responses for other
endpoints

###
[`v1.21`](https://redirect.github.com/colour-science/flask-compress/blob/HEAD/CHANGELOG.md#121-2025-11-04)

[Compare
Source](https://redirect.github.com/colour-science/flask-compress/compare/v1.20...v1.21)

- compressing *streaming* responses is now supported:
  - the *previous* behavior was:
- if `COMPRESS_STREAMS` was `True` (the default), streaming responses
were compressed in *1 sitting* using `response.get_data()`, meaning
streaming responses were compressed but *not streamed*
- if `COMPRESS_STREAMS` was `False`, streaming responses were not
compressed at all
  - the *new* behavior is:
- if `COMPRESS_STREAMS` is `True`, streaming responses are compressed
chunk-by-chunk using `response.iter_encoded()`, which means that
streaming responses are compressed and streamed
- if `COMPRESS_STREAMS` is `False`, streaming responses are not
compressed at all, as before.
- we have a new `COMPRESS_ALGORITHM_STREAMING` config option to specify
the compression algorithm to use for streaming responses, which defaults
to `["zstd", "br", "deflate"]`, as `"gzip"` is not suitable for
streaming compression.
- ⚠️ serving static content with Flask is actually using *streaming*
responses, so if you enable streaming compression, static content will
be compressed chunk-by-chunk as well, which may not be what you want.

</details>

<details>
<summary>googleapis/google-auth-library-python (google-auth)</summary>

###
[`v2.42.1`](https://redirect.github.com/googleapis/google-auth-library-python/blob/HEAD/CHANGELOG.md#2421-2025-10-30)

[Compare
Source](https://redirect.github.com/googleapis/google-auth-library-python/compare/v2.42.0...v2.42.1)

##### Bug Fixes

- Catch ValueError for json.loads()
([#&#8203;1842](https://redirect.github.com/googleapis/google-auth-library-python/issues/1842))
([b074cad](https://redirect.github.com/googleapis/google-auth-library-python/commit/b074cad460589633adfc6744c01726ae86f2aa2b))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Author: renovate-bot

gcp/website/poetry.lock

@@ -4,9 +4,9 @@ requires-python = ">=3.13,<4.0"
 dependencies = [
     "Flask==2.3.3",
     "Flask-Caching==2.3.1",
-    "Flask-Compress==1.20",
+    "Flask-Compress==1.22",
     "werkzeug==3.1.3",
-    "google-auth==2.42.0",
+    "google-auth==2.42.1",
     "google-cloud-ndb==2.3.4",
     "google-cloud-logging==3.12.1",
     "jinja2==3.1.6",