chore(deps): lock file maintenance osv-lib (#4261)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Confidence |
|---|---|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |  |  |
|
[google-cloud-pubsub](https://redirect.github.com/googleapis/python-pubsub)
| project.dependencies | minor | `2.31.1` -> `2.32.0` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/google-cloud-pubsub/2.32.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/google-cloud-pubsub/2.31.1/2.32.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [pygit2](https://redirect.github.com/libgit2/pygit2)
([changelog](https://redirect.github.com/libgit2/pygit2/blob/master/CHANGELOG.md))
| project.dependencies | minor | `1.18.2` -> `1.19.0` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/pygit2/1.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/pygit2/1.18.2/1.19.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>googleapis/python-pubsub (google-cloud-pubsub)</summary>

###
[`v2.32.0`](https://redirect.github.com/googleapis/python-pubsub/blob/HEAD/CHANGELOG.md#2320-2025-10-28)

[Compare
Source](https://redirect.github.com/googleapis/python-pubsub/compare/v2.31.1...v2.32.0)

##### Features

- Adds Python 3.14 support
([#&#8203;1512](https://redirect.github.com/googleapis/python-pubsub/issues/1512))
([95a2690](https://redirect.github.com/googleapis/python-pubsub/commit/95a26907efecfa5d56b140b7f833640b7fbb21d7))
- Debug logs
([#&#8203;1460](https://redirect.github.com/googleapis/python-pubsub/issues/1460))
([b5d4a45](https://redirect.github.com/googleapis/python-pubsub/commit/b5d4a458ca9319bebbe3142a1f05d4d4471c8d4d))
- Support the protocol version in StreamingPullRequest
([#&#8203;1455](https://redirect.github.com/googleapis/python-pubsub/issues/1455))
([e6294a1](https://redirect.github.com/googleapis/python-pubsub/commit/e6294a1883abf9809cb56d5cd4ad25cc501bc994))

##### Bug Fixes

- Ignore future warnings on python versions
([#&#8203;1546](https://redirect.github.com/googleapis/python-pubsub/issues/1546))
([8e28dea](https://redirect.github.com/googleapis/python-pubsub/commit/8e28dea5b68fc940266d0b1a9f2a07a7b5f10b34))

</details>

<details>
<summary>libgit2/pygit2 (pygit2)</summary>

###
[`v1.19.0`](https://redirect.github.com/libgit2/pygit2/blob/HEAD/CHANGELOG.md#1190-2025-10-23)

[Compare
Source](https://redirect.github.com/libgit2/pygit2/compare/v1.18.2...v1.19.0)

- Add support for Python 3.14 and drop 3.10

- Support threaded builds (experimental)
  [#&#8203;1430](https://redirect.github.com/libgit2/pygit2/pull/1430)
  [#&#8203;1435](https://redirect.github.com/libgit2/pygit2/pull/1435)

- Add Linux musl wheels for AArch64

- Add Windows wheels for AArch64;
  CI: build Windows wheels with cibuildwheel on GitHub
  [#&#8203;1423](https://redirect.github.com/libgit2/pygit2/pull/1423)

- New `Repository.transaction()` context manager, returns new
`ReferenceTransaction`
  [#&#8203;1420](https://redirect.github.com/libgit2/pygit2/pull/1420)

- CI: add GitHub releases and other improvements
  [#&#8203;1433](https://redirect.github.com/libgit2/pygit2/pull/1433)
  [#&#8203;1432](https://redirect.github.com/libgit2/pygit2/pull/1432)
  [#&#8203;1425](https://redirect.github.com/libgit2/pygit2/pull/1425)
  [#&#8203;1431](https://redirect.github.com/libgit2/pygit2/pull/1431)

- Documentation improvements and other changes
  [#&#8203;1426](https://redirect.github.com/libgit2/pygit2/pull/1426)
  [#&#8203;1424](https://redirect.github.com/libgit2/pygit2/pull/1424)

Breaking changes:

- Remove deprecated `IndexEntry.hex`, use `str(entry.id)` instead of
`entry.hex`

Deprecations:

- Deprecate `IndexEntry.oid`, use `entry.id` instead of `entry.oid`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTkuNCIsInVwZGF0ZWRJblZlciI6IjQxLjE1OS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Author: renovate-bot