updates

Author: ohmayr

packages/google-auth/setup.py

@@ -19,7 +19,8 @@
 from setuptools import setup
 
 cryptography_base_require = [
-    "cryptography >= 38.0.3",
+    "cryptography >= 38.0.3; python_version < '3.14'",
+    "cryptography >= 41.0.5; python_version >= '3.14'",
 ]
 
 DEPENDENCIES = (

packages/google-auth/testing/constraints-3.10.txt

@@ -1,7 +1,5 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py
-# List *all* library dependencies and extras in this file.
-# Pin the version to the lower bound.
+# Lower-bound constraints for Python 3.10 core dependencies.
+# Used during CI unit tests to verify minimum supported package versions.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==38.0.3

packages/google-auth/testing/constraints-3.11.txt

@@ -1,5 +1,5 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py for all dependencies and regular extras on Python 3.11
+# Lower-bound constraints for Python 3.11 core dependencies.
+# Pins requests==2.30.0 and aiohttp==3.9.0 to maintain compatibility with urllib3 v2.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==38.0.3

packages/google-auth/testing/constraints-3.12.txt

@@ -1,5 +1,5 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py for all dependencies and regular extras on Python 3.12
+# Lower-bound constraints for Python 3.12 core dependencies.
+# Pins requests==2.30.0 and aiohttp==3.9.0 to maintain compatibility with urllib3 v2.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==38.0.3

packages/google-auth/testing/constraints-3.13.txt

@@ -1,5 +1,5 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py for all dependencies and regular extras on Python 3.13
+# Lower-bound constraints for Python 3.13 core dependencies.
+# Pins requests==2.30.0 and aiohttp==3.9.0 to maintain compatibility with urllib3 v2.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==38.0.3

packages/google-auth/testing/constraints-3.14.txt

@@ -1,5 +1,5 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py for all dependencies and regular extras on Python 3.14
+# Lower-bound constraints for Python 3.14 core dependencies.
+# Pins cryptography==41.0.5 for CPython 3.14 C-extension compatibility, alongside requests==2.30.0 and aiohttp==3.9.0.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==41.0.5

packages/google-auth/testing/constraints-extras-3.10.txt

@@ -1,5 +1,6 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py for all dependencies and optional extras on Python 3.10
+# Lower-bound constraints for Python 3.10 extended/optional extras (pyopenssl, rsa, enterprise_cert).
+# Used during boundary Nox unit sessions (install_deprecated_extras=True) to test legacy/extra paths on 3.10.
+# Note: cryptography==41.0.5 is required here because pyopenssl>=23.2.0 depends on cryptography>=41.0.5.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==41.0.5

packages/google-auth/testing/constraints-extras-3.14.txt

@@ -1,5 +1,5 @@
-# This constraints file is used to check that lower bounds
-# are correct in setup.py for all dependencies and optional extras on Python 3.14
+# Lower-bound constraints for Python 3.14 extended/optional extras (pyopenssl, rsa, enterprise_cert).
+# Used during boundary Nox unit sessions (install_deprecated_extras=True) to test legacy/extra paths on 3.14.
 pyasn1-modules==0.2.1
 setuptools==40.3.0
 cryptography==41.0.5