diff --git a/google-auth-2.28.1.tar.gz b/google-auth-2.28.1.tar.gz
deleted file mode 100644
index 5a8d99d1f89cee7c8f00253923559573777ef1ea..0000000000000000000000000000000000000000
Binary files a/google-auth-2.28.1.tar.gz and /dev/null differ
diff --git a/google_auth-2.40.2.tar.gz b/google_auth-2.40.2.tar.gz
new file mode 100644
index 0000000000000000000000000000000000000000..c9a4f6a579c99d3e548fa9786c194f4bb6311650
Binary files /dev/null and b/google_auth-2.40.2.tar.gz differ
diff --git a/python-google-auth.spec b/python-google-auth.spec
index f8ea30ced62a26327527c2cbf81865a612a1860b..7c5d99ac6a07e3772f1a60645ff57fe8d5cb25a1 100644
--- a/python-google-auth.spec
+++ b/python-google-auth.spec
@@ -1,11 +1,12 @@
 %global _empty_manifest_terminate_build 0
 Name:		python-google-auth
-Version:	2.28.1
+Version:	2.40.2
 Release:	1
 Summary:	Google Authentication Library
 License:	Apache-2.0
 URL:		https://github.com/googleapis/google-auth-library-python
-Source0:	https://files.pythonhosted.org/packages/9a/15/ac42556763c08e1b1821a7e55f3a93982c50ca7f25adf8f61a01dd2ed98b/google-auth-2.28.1.tar.gz
+Source0:	https://files.pythonhosted.org/packages/source/g/google_auth/google_auth-%{version}.tar.gz
+
 BuildArch:	noarch
 
 Requires:	python3-cachetools
@@ -40,7 +41,7 @@ This library simplifies using Google's various server-to-server authentication
 mechanisms to access Google APIs.
 
 %prep
-%autosetup -n google-auth-%{version}
+%autosetup -n google_auth-%{version}
 
 %build
 %py3_build
@@ -80,6 +81,49 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Wed May 28 2025 chengwei <chenwei@teligen.net> - 2.40.2-1
+- update to 2.40.2
+- Remove sync response logs in AuthorizedSession
+- Update test to consider new error message from cryptography
+- Disable logging response body for async logs 
+- Add request response logging to auth
+- Correct webauthn JSON parsing to be compliant with standard.
+
+* Mon May 19 2025  openeuler_bot <infra@openeuler.sh> - 2.39.0-1
+- Adds GA support for X.509 workload identity federation (version: 2.39.0).
+- Add impersonated SA via local ADC support for fetch_id_token (version: 2.39.0).
+- Add missing packaging dependency for feature requiring urllib3 (version: 2.39.0).
+- Add request timeout for MDS requests (version: 2.39.0).
+
+* Thu Mar 27 2025  openeuler_bot <infra@openeuler.sh> - 2.38.0-1
+- Improve user guide for Impersonation and SA (version: 2.36.1)
+- Allow users to use jwk keys for verifying ID token (version: 2.37.0)
+- Adding domain-wide delegation flow in impersonated credential (version: 2.38.0)
+
+* Thu Nov 07 2024 songliyang <songliyang@kylinos.cn> - 2.36.0-1
+- upgrade to version 2.36.0
+- fix: adding default parameters to updated interfaces
+- fix: remove base class to avoid type conflict
+- fix: update secret
+- fix: revert templates for iam endpoints
+
+* Tue Oct 8 2024 guojunding <guojunding@kylinos.cn> - 2.35.0-1
+- Update package to version 2.35.0
+- Add cred info to ADC creds 
+- Add support for asynchronous AuthorizedSession api 
+- Remove token_info call from token refresh path 
+
+* Wed Sep 4 2024 guojunding <guojunding@kylinos.cn> - 2.34.0-1
+- Update package to version 2.34.0
+- Update get_client_ssl_credentials to support X.509 workload certs (#1558) (18c2ec1)
+- Bug Fixes Retry token request on retryable status code (#1563) (f858a15)
+
+* Wed Aug 14 2024 xu_ping <707078654@qq.com> - 2.33.0-1
+- Update package to version 2.33.0
+  *Adds support for custom suppliers in AWS and Identity Pool credentials
+  *Adds support for X509 workload credential type
+  *Adds X509 workload cert logic
+
 * Mon Feb 26 2024 jiangxinyu <jiangxinyu@kylinos.cn> - 2.28.1-1
 - Update package to version 2.28.1
   Typo when setting the state for the pickle deserializer