cachetools dependency too strict: ==4.2.0 pin causes conflicts

[cavanierc]

Issue

In ipinfo 5.5.0, cachetools is pinned to exactly ==4.2.0 in the package dependencies. This version is over 6 years old and creates a hard conflict with other packages in the dependency graph.

Impact

In my case, another dependency requires cachetools>=7.0.3, which is directly incompatible with ipinfo's ==4.2.0 pin. This makes it impossible to install both packages in the same environment.

Question

Is there a specific reason for this strict pin rather than using a range like cachetools>=4.2.0 or cachetools>=4.2.0,<8?

If there is no known incompatibility with cachetools v5.x/v6.x/v7.x, would you consider loosening this constraint?

Environment

• ipinfo==5.5.0
• Other dependency requires cachetools>=7.0.3
• Tooling: tox 4

Thanks!

[socketz]

I have also a problem with other packages, and I just created a pull request to resolve this issue.