-
Notifications
You must be signed in to change notification settings - Fork 345
Closed
Labels
priority: p2Moderately-important priority. Fix may not be included in next release.Moderately-important priority. Fix may not be included in next release.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.
Description
cachetools has released a new version (5.0.0) which conflicts with google-auth requirements of it being <5, this prevents updates to the cachetools package and pose a potential security concern (as updates are no longer possible to it)
The conflict is caused by:
The user requested cachetools==5.0.0
google-auth 2.3.3 depends on cachetools<5.0 and >=2.0.0
issue seems in
google-auth-library-python/setup.py
Line 23 in 3c3fbf4
| "cachetools>=2.0.0,<5.0", |
Environment details
- OS: alpine3.11
- Python version: python:3.8.6
- pip version: 20.3.3
google-authversion: 2.3.3 (latest at time of writing)
Steps to reproduce
- try pip install using latest
cachetoolswith latestgoogle-auth - pip fails
jonringer
Metadata
Metadata
Assignees
Labels
priority: p2Moderately-important priority. Fix may not be included in next release.Moderately-important priority. Fix may not be included in next release.type: bugError or flaw in code with unintended results or allowing sub-optimal usage patterns.Error or flaw in code with unintended results or allowing sub-optimal usage patterns.