This PR would also resolve #2935.

Upgrading google-auth-library from v9 to v10 updates gaxios from v6 to v7, which replaces node-fetch@^2 with node-fetch@^3. This eliminates the transitive dependency on whatwg-url@5 → tr46@0.0.3 → built-in punycode, resolving the [DEP0040] deprecation warning on Node.js 21+.

It also resolves the [DEP0169] (url.parse()) warning, since node-fetch@2 uses the deprecated url.parse() internally.

CI is all green — would love to see this merged!