diff --git a/.github/workflows/renovate_config_check.yaml b/.github/workflows/renovate_config_check.yaml
index 7c5ec7865..36da117bc 100644
--- a/.github/workflows/renovate_config_check.yaml
+++ b/.github/workflows/renovate_config_check.yaml
@@ -7,7 +7,7 @@ on:
 
 jobs:
   renovate_bot_config_validation:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
     - name: Checkout code
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 83d039b2f..8889dfbc4 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [2.7.2](https://github.com/googleapis/google-api-java-client/compare/v2.7.1...v2.7.2) (2025-01-22)
+
+
+### Bug Fixes
+
+* Add warnings to users about using credentials from external sources ([#2551](https://github.com/googleapis/google-api-java-client/issues/2551)) ([3bb2879](https://github.com/googleapis/google-api-java-client/commit/3bb28796845a62b68a32a9cee7b4c6380b759cc1))
+
 ## [2.7.1](https://github.com/googleapis/google-api-java-client/compare/v2.7.0...v2.7.1) (2024-12-10)
 
 
diff --git a/google-api-client-android/pom.xml b/google-api-client-android/pom.xml
index 76829b3da..2bc3b11be 100644
--- a/google-api-client-android/pom.xml
+++ b/google-api-client-android/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-android</artifactId>
diff --git a/google-api-client-apache-v5/pom.xml b/google-api-client-apache-v5/pom.xml
index eb128c6ae..7c9f3c332 100644
--- a/google-api-client-apache-v5/pom.xml
+++ b/google-api-client-apache-v5/pom.xml
@@ -6,7 +6,7 @@
     <parent>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-parent</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     </parent>
     <artifactId>google-api-client-apache-v5</artifactId>
     <name>Apache extensions to the Google APIs Client Library for Java</name>
diff --git a/google-api-client-appengine/pom.xml b/google-api-client-appengine/pom.xml
index 06d736d52..3d07ad9c6 100644
--- a/google-api-client-appengine/pom.xml
+++ b/google-api-client-appengine/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-appengine</artifactId>
diff --git a/google-api-client-assembly/pom.xml b/google-api-client-assembly/pom.xml
index 5a4ae9c71..3abfb0459 100644
--- a/google-api-client-assembly/pom.xml
+++ b/google-api-client-assembly/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <groupId>com.google.api-client</groupId>
diff --git a/google-api-client-bom/pom.xml b/google-api-client-bom/pom.xml
index 4132c3856..45ee975a4 100644
--- a/google-api-client-bom/pom.xml
+++ b/google-api-client-bom/pom.xml
@@ -3,7 +3,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>com.google.api-client</groupId>
   <artifactId>google-api-client-bom</artifactId>
-  <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+  <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
   <packaging>pom</packaging>
 
   <name>Google API Client Library for Java BOM</name>
@@ -63,48 +63,48 @@
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-android</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-appengine</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-assembly</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
         <type>pom</type>
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-gson</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-jackson2</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-protobuf</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-servlet</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
       <dependency>
         <groupId>com.google.api-client</groupId>
         <artifactId>google-api-client-xml</artifactId>
-        <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+        <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
       </dependency>
     </dependencies>
   </dependencyManagement>
diff --git a/google-api-client-gson/pom.xml b/google-api-client-gson/pom.xml
index 4e3a1905e..6d2301fbc 100644
--- a/google-api-client-gson/pom.xml
+++ b/google-api-client-gson/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-gson</artifactId>
diff --git a/google-api-client-jackson2/pom.xml b/google-api-client-jackson2/pom.xml
index b3c7fb777..856277419 100644
--- a/google-api-client-jackson2/pom.xml
+++ b/google-api-client-jackson2/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-jackson2</artifactId>
diff --git a/google-api-client-protobuf/pom.xml b/google-api-client-protobuf/pom.xml
index b30338277..ada1611ba 100644
--- a/google-api-client-protobuf/pom.xml
+++ b/google-api-client-protobuf/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-protobuf</artifactId>
diff --git a/google-api-client-servlet/pom.xml b/google-api-client-servlet/pom.xml
index 711aa786b..7107d672e 100644
--- a/google-api-client-servlet/pom.xml
+++ b/google-api-client-servlet/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-servlet</artifactId>
diff --git a/google-api-client-xml/pom.xml b/google-api-client-xml/pom.xml
index 21fb047a4..cf9165bb9 100644
--- a/google-api-client-xml/pom.xml
+++ b/google-api-client-xml/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client-xml</artifactId>
diff --git a/google-api-client/pom.xml b/google-api-client/pom.xml
index c7ecf759b..e63449d23 100644
--- a/google-api-client/pom.xml
+++ b/google-api-client/pom.xml
@@ -4,7 +4,7 @@
   <parent>
     <groupId>com.google.api-client</groupId>
     <artifactId>google-api-client-parent</artifactId>
-    <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+    <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
     <relativePath>../pom.xml</relativePath>
   </parent>
   <artifactId>google-api-client</artifactId>
diff --git a/google-api-client/src/main/java/com/google/api/client/googleapis/auth/oauth2/GoogleCredential.java b/google-api-client/src/main/java/com/google/api/client/googleapis/auth/oauth2/GoogleCredential.java
index 632b495e6..590a422e2 100644
--- a/google-api-client/src/main/java/com/google/api/client/googleapis/auth/oauth2/GoogleCredential.java
+++ b/google-api-client/src/main/java/com/google/api/client/googleapis/auth/oauth2/GoogleCredential.java
@@ -199,6 +199,13 @@ public static GoogleCredential getApplicationDefault(
    * {@link Beta} <br>
    * Return a credential defined by a Json file.
    *
+   * <p>Important: If you accept a credential configuration (credential JSON/File/Stream) from an
+   * external source for authentication to Google Cloud Platform, you must validate it before
+   * providing it to any Google API or library. Providing an unvalidated credential configuration to
+   * Google APIs can compromise the security of your systems and data. For more information, refer
+   * to {@link <a
+   * href="https://cloud.google.com/docs/authentication/external/externally-sourced-credentials">documentation</a>}.
+   *
    * @param credentialStream the stream with the credential definition.
    * @return the credential defined by the credentialStream.
    * @throws IOException if the credential cannot be created from the stream.
@@ -212,6 +219,13 @@ public static GoogleCredential fromStream(InputStream credentialStream) throws I
    * {@link Beta} <br>
    * Return a credential defined by a Json file.
    *
+   * <p>Important: If you accept a credential configuration (credential JSON/File/Stream) from an
+   * external source for authentication to Google Cloud Platform, you must validate it before
+   * providing it to any Google API or library. Providing an unvalidated credential configuration to
+   * Google APIs can compromise the security of your systems and data. For more information, refer
+   * to {@link <a
+   * href="https://cloud.google.com/docs/authentication/external/externally-sourced-credentials">documentation</a>}.
+   *
    * @param credentialStream the stream with the credential definition.
    * @param transport the transport for Http calls.
    * @param jsonFactory the factory for Json parsing and formatting.
diff --git a/pom.xml b/pom.xml
index 451d3d05a..2b6d391f6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -4,7 +4,7 @@
   <modelVersion>4.0.0</modelVersion>
   <groupId>com.google.api-client</groupId>
   <artifactId>google-api-client-parent</artifactId>
-  <version>2.7.1</version><!-- {x-version-update:google-api-client:current} -->
+  <version>2.7.2</version><!-- {x-version-update:google-api-client:current} -->
   <packaging>pom</packaging>
   <name>Parent for the Google API Client Library for Java</name>
   <description>The Google APIs Client Library for Java is a Java client library
diff --git a/renovate.json b/renovate.json
index f53a16edd..a9dbc8a02 100644
--- a/renovate.json
+++ b/renovate.json
@@ -1,38 +1,44 @@
 {
   "extends": [
-    "config:base"
+    "config:recommended"
+  ],
+  "ignorePaths": [
+    ".kokoro/requirements.txt"
   ],
-  "ignorePaths": [".kokoro/requirements.txt"],
   "packageRules": [
     {
-      "packagePatterns": ["^com.google.appengine:appengine-"],
-      "groupName": "AppEngine packages"
+      "groupName": "AppEngine packages",
+      "matchPackageNames": [
+        "/^com.google.appengine:appengine-/"
+      ]
     },
     {
-      "matchPackageNames": ["jakarta.servlet:jakarta.servlet-api"],
+      "matchPackageNames": [
+        "jakarta.servlet:jakarta.servlet-api"
+      ],
       "groupName": "Jakarta servlet API",
-      "enabled": false,
+      "enabled": false
     },
     {
-      "matchPackagePatterns": [
-        "^com.google.guava:"
-      ],
       "versioning": "docker",
-      "enabled": false
+      "enabled": false,
+      "matchPackageNames": [
+        "/^com.google.guava:/"
+      ]
     },
     {
-      "matchPackagePatterns": [
-        "^com.google.protobuf"
-      ],
       "groupName": "Protobuf dependencies",
-      "enabled": false
+      "enabled": false,
+      "matchPackageNames": [
+        "/^com.google.protobuf/"
+      ]
     },
     {
-      "matchPackagePatterns": [
-        "^io.grpc"
-      ],
       "groupName": "gRPC dependencies",
-      "enabled": false
+      "enabled": false,
+      "matchPackageNames": [
+        "/^io.grpc/"
+      ]
     }
   ]
 }
diff --git a/versions.txt b/versions.txt
index 5c8ca4792..6810843a5 100644
--- a/versions.txt
+++ b/versions.txt
@@ -1,4 +1,4 @@
 # Format:
 # module:released-version:current-version
 
-google-api-client:2.7.1:2.7.1
+google-api-client:2.7.2:2.7.2