Skip to content
This repository was archived by the owner on Mar 13, 2026. It is now read-only.
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -155,9 +155,9 @@ google-api-core[grpc]==2.26.0 \
# via
# google-cloud-core
# google-cloud-spanner
google-auth==2.41.1 \
--hash=sha256:754843be95575b9a19c604a848a41be03f7f2afd8c019f716dc1f51ee41c639d \
--hash=sha256:b76b7b1f9e61f0cb7e88870d14f6a94aeef248959ef6992670efee37709cbfd2
google-auth==2.49.1 \
--hash=sha256:16d40da1c3c5a0533f57d268fe72e0ebb0ae1cc3b567024122651c045d879b64 \
--hash=sha256:195ebe3dca18eddd1b3db5edc5189b76c13e96f29e73043b923ebcf3f1a860f7
Comment on lines +158 to +160

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

While updating google-auth is a good step, this change has been applied in a way that creates an inconsistency in your dependency file.

According to the release notes, google-auth version 2.47.0 and newer dropped the cachetools dependency.

However, requirements.txt still includes cachetools and incorrectly lists it as a dependency of google-auth (lines 17-20):

cachetools==7.0.2 \
    ...
    # via google-auth

This indicates that requirements.txt is now out of sync. Instead of manually changing the version, you should regenerate the file by running pip-compile --generate-hashes, as indicated in the file's header. This will ensure all transitive dependencies are correctly resolved.

# via
# google-api-core
# google-cloud-core
Expand Down
Loading