Skip to content
This repository has been archived by the owner on Aug 10, 2024. It is now read-only.

Commit

Permalink
Upgrade google-auth from 1.11.2 to 1.17.0
Browse files Browse the repository at this point in the history
We need to upgrade rsa from 4.0 to 4.7 resolve a few vulnerabilities.
However, the current dependency of google-auth==1.11.2 prevents
rsa-4.7 from being installed. For example, here is the error we get in
Python 3.8

    ERROR: Cannot install -r requirements.txt (line 21) and rsa==4.7
    because these package versions have conflicting dependencies.

    The conflict is caused by:
        The user requested rsa==4.7
        google-auth 1.11.2 depends on rsa<4.1 and >=3.1.4

Version 1.11.2 of google-auth indeed did not support rsa version 4.1
or later. Version 1.17.0 is the earliest version of google-auth to
support rsa version 4.1 or later. See the following URLs to confirm
this:

  - https://github.com/googleapis/google-auth-library-python/blob/v1.11.2/setup.py#L24
  - https://github.com/googleapis/google-auth-library-python/blob/v1.17.0/setup.py#L24

This change upgrades the google-auth library to 1.17.0, so that
rsa-4.7 can be installed without a conflict.

Lines starting # with '#' will be ignored, and an empty message aborts
the commit. # # On branch dependabot/pip/rsa-4.7 # Your branch is up
to date with 'origin/dependabot/pip/rsa-4.7'. # # Changes to be
committed: # modified: requirements.txt #
  • Loading branch information
susam committed May 15, 2021
1 parent 4dfe49a commit b166ae8
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion requirements.txt
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ chardet==3.0.4
cryptography==2.8
elasticsearch==7.12.1
google-api-python-client==1.7.11
google-auth==1.11.2
google-auth==1.17.0
google-auth-httplib2==0.0.3
httplib2==0.19.0
idna==2.9
Expand Down

0 comments on commit b166ae8

Please sign in to comment.