* test: Add tests to covere deprecation and suppression

* lint

* blacken

* feat: Add trust boundary support for external accounts.

* Add trust boundary support to external account authorized users.

* Fix lint issues

* Implement additional unit tests for external account authorized user.

* fix formatting issue

* Add a unit test with invalid audiance

* add missing unit tests

* fix: Read scopes from ADC json for impersoanted cred

* secret

* secret update

* secret update

* 🦉 Updates from OwlBot post-processor

See https://github.com/googleapis/repo-automation-bots/blob/main/packages/owl-bot/README.md

---------

Co-authored-by: Owl Bot <gcf-owl-bot[bot]@users.noreply.github.com>

🤖 I have created a release *beep* *boop*
---


##
[2.42.0](v2.41.1...v2.42.0)
(2025-10-24)


### Features

* Add trust boundary support for external accounts.
([#1809](#1809))
([36ecb1d](36ecb1d))


### Bug Fixes

* Read scopes from ADC json for impersoanted cred
([#1820](#1820))
([62c0fc8](62c0fc8))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>

see internal bug 448976223

TODO: 
 - [x] add test
 - [x] match the exception string so we don't catch unexpected cases

🤖 I have created a release *beep* *boop*
---


##
[2.42.1](v2.42.0...v2.42.1)
(2025-10-30)


### Bug Fixes

* Catch ValueError for json.loads()
([#1842](#1842))
([b074cad](b074cad))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: release-please[bot] <55107282+release-please[bot]@users.noreply.github.com>