Skip to content
This repository was archived by the owner on Mar 6, 2026. It is now read-only.
This repository was archived by the owner on Mar 6, 2026. It is now read-only.

new cachetools version (5.0.0+) can't work with google-auth #934

Closed

Description

@naorlivne

cachetools has released a new version (5.0.0) which conflicts with google-auth requirements of it being <5, this prevents updates to the cachetools package and pose a potential security concern (as updates are no longer possible to it)

The conflict is caused by:
    The user requested cachetools==5.0.0
    google-auth 2.3.3 depends on cachetools<5.0 and >=2.0.0

issue seems in

"cachetools>=2.0.0,<5.0",

Environment details

  • OS: alpine3.11
  • Python version: python:3.8.6
  • pip version: 20.3.3
  • google-auth version: 2.3.3 (latest at time of writing)

Steps to reproduce

  1. try pip install using latest cachetools with latest google-auth
  2. pip fails

Activity

  1. busunkim96 commented on Dec 30, 2021

    @busunkim96
    Contributor

    Thanks for the heads up @naorlivne! I've opened a draft PR with updated pins on cachetools (#937).

  2. self-assigned this
    on Dec 30, 2021
  3. added
    priority: p2Moderately-important priority. Fix may not be included in next release.
    type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.
    and removed
    triage meI really want to be triaged.
    on Dec 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

priority: p2Moderately-important priority. Fix may not be included in next release.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions