From e797bbcf71753c0a98b26e8ddab2a104b0aa15b8 Mon Sep 17 00:00:00 2001
From: ohmayr <omairn@google.com>
Date: Thu, 30 Oct 2025 01:44:51 +0000
Subject: [PATCH] fix: add upper-bound to google-auth dependency

---
 setup.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/setup.py b/setup.py
index 1240a71..494dd58 100644
--- a/setup.py
+++ b/setup.py
@@ -20,7 +20,12 @@
 
 TOOL_DEPENDENCIES = "click>=6.0.0"
 
-DEPENDENCIES = ("google-auth>=2.15.0", "requests-oauthlib>=0.7.0")
+# TODO(https://github.com/googleapis/google-auth-library-python-oauthlib/issues/422): google-auth 2.42.0
+# introduces a change that isn't compatible with
+# google-auth-oauthlib.
+# Specifically https://github.com/googleapis/google-auth-library-python/commit/36ecb1d65883477d27faf9c2281fc289659b9903
+# which results in the unit tests to fail. Remove the upper bound once the issue is resolved.
+DEPENDENCIES = ("google-auth>=2.15.0,<2.42.0", "requests-oauthlib>=0.7.0")
 
 
 with io.open("README.rst", "r") as fh: