Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

new cachetools version (5.0.0+) can't work with google-auth #934

Closed
naorlivne opened this issue Dec 27, 2021 · 1 comment · Fixed by #937
Closed

new cachetools version (5.0.0+) can't work with google-auth #934

naorlivne opened this issue Dec 27, 2021 · 1 comment · Fixed by #937
Assignees
Labels
priority: p2 Moderately-important priority. Fix may not be included in next release. type: bug Error or flaw in code with unintended results or allowing sub-optimal usage patterns.

Comments

@naorlivne
Copy link

cachetools has released a new version (5.0.0) which conflicts with google-auth requirements of it being <5, this prevents updates to the cachetools package and pose a potential security concern (as updates are no longer possible to it)

The conflict is caused by:
    The user requested cachetools==5.0.0
    google-auth 2.3.3 depends on cachetools<5.0 and >=2.0.0

issue seems in

"cachetools>=2.0.0,<5.0",

Environment details

  • OS: alpine3.11
  • Python version: python:3.8.6
  • pip version: 20.3.3
  • google-auth version: 2.3.3 (latest at time of writing)

Steps to reproduce

  1. try pip install using latest cachetools with latest google-auth
  2. pip fails
@busunkim96
Copy link
Contributor

Thanks for the heads up @naorlivne! I've opened a draft PR with updated pins on cachetools (#937).

@busunkim96 busunkim96 self-assigned this Dec 30, 2021
@busunkim96 busunkim96 added priority: p2 Moderately-important priority. Fix may not be included in next release. type: bug Error or flaw in code with unintended results or allowing sub-optimal usage patterns. and removed triage me I really want to be triaged. labels Dec 30, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
priority: p2 Moderately-important priority. Fix may not be included in next release. type: bug Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants