Authenticate PyPi datasource with Google Artifact Registry using GCloud SDK credentials

[maxbrunet]

Tell us more.

The docker and maven datasources already support it, the getGoogleAuthToken function can be re-used:

renovate/lib/modules/datasource/util.ts

Line 15 in ceec2bc

export async function getGoogleAuthToken(): Promise<string | null> {

The token should be passed to these 2 HTTP calls when the host ends with .pkg.dev:

renovate/lib/modules/datasource/pypi/index.ts

Line 99 in ceec2bc

const rep = await this.http.getJson<PypiJSON>(lookupUrl);

renovate/lib/modules/datasource/pypi/index.ts

Line 247 in ceec2bc

const response = await this.http.get(lookupUrl);

An example of how the Python keyring uses it:

• GoogleCloudPlatform/artifact-registry-python-tools@1589e75/keyrings/gauth.py#L39
• GoogleCloudPlatform/artifact-registry-python-tools@1589e75/keyrings/gauth.py#L69

Official documentation: https://cloud.google.com/artifact-registry/docs/python/authentication

[maxbrunet]

PR #31262