-
Notifications
You must be signed in to change notification settings - Fork 140
Description
Hi,
I'm opening this issue because we're currently facing a dependency and a subdependency conflict that is breaking our connectors CI:
#0 5.122 The conflict is caused by:
#0 5.122 google-auth 2.40.3 depends on cachetools<6.0 and >=2.0.0
#0 5.122 pycti 6.7.7 depends on cachetools~=6.1.0
and
#0 5.116 The conflict is caused by:
#0 5.116 The user requested prometheus-client<=0.21.1 and >=0.20.0
#0 5.116 pycti 6.7.7 depends on prometheus-client~=0.22.1
These issues were introduced by Renovabot updates in the client-python repository.
For the cachetools conflict, it originates from this PR: #914
which bumped the version from 5.5.0 to 6.1.0, while google-auth requires <6.0.
As for prometheus-client, the problem comes from this PR: #896
which upgraded from 0.21.1 to 0.22.1, but one connector (https://github.com/OpenCTI-Platform/connectors/blob/master/stream/crowdstrike-endpoint-security/src/requirements.txt) still requires <0.21.1.
Resolution Plan:
-
I will open a PR on client-python to pin cachetools to 5.5.2.
-
I will temporarily downgrade the following connectors to pycti==6.7.6 until the client-python PR is merged and dependencies are updated:
- stream_google-secops-siem
- stream_chronicle
- external-import_google-drive
- external-import_email-intel-imap
-
Regarding prometheus-client, I will update the dependency constraint in the stream_crowdstrike-endpoint-security connector accordingly.