Build: Bump cachetools from 5.5.2 to 6.1.0

[dependabot]

Bumps cachetools from 5.5.2 to 6.1.0.

Changelog

Sourced from cachetools's changelog.

v6.1.0 (2025-06-16)

• Improve LFUCache insertion performance by switching to an implementation based on the cacheing <https://pypi.org/project/cacheing/>_ library.

• Update CI environment.

v6.0.0 (2025-05-23)

• Require Python 3.9 or later (breaking change).

• Remove MRUCache and the @func.mru_cache decorator (breaking change).

• Add an optional condition parameter to the @cached and @cachedmethod decorators, which, when used with a threading.Condition instance, should improve cache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues in massively parallel environments. Note that this will inflict some performance penalty, and therefore has to be enabled explicitly.

• Convert the cachetools.func decorators to use a threading.Condition instance to deal with cache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues. Note that this may result in a noticable performance degradation, depending on your actual use case.

• Deprecate support for cache(self) returning None to suppress caching with the @cachedmethod decorator.

• Improve documentation.

• Update CI environment.

Commits

• bb6d71a Release v6.1.0.
• 77a9c59 Fix #260: Use LFUCache implementation based on Blake Reid's "cacheing" library.
• b1d4eb2 Bump codecov/codecov-action from 5.4.2 to 5.4.3
• 820b154 Refactor @​cachedmethod unit tests.
• e497575 Release v6.0.0.
• 0a8f391 Update related projects section.
• 3afef37 Pre-release v6.0.0b4.
• 34815dd Update documentation for v6.0.0.
• 8854b50 Add intersphinx extension.
• 0af4a07 Bump codecov/codecov-action from 5.4.0 to 5.4.2
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[kevinjqliu]

@dependabot rebase

[Fokko]

@dependabot recreate

[kevinjqliu]

@dependabot recreate

[kevinjqliu]

Copying over explanation from #2161 (comment)

But cachetools does not have any dependencies, so also not on google-cloud-storage. Why does it lower the GCP dependencies

I found the culprit! poetry show --tree:

├── google-cloud-storage *
│   ├── google-api-core >=2.15.0,<3.0.0 
│   │   ├── google-auth >=2.14.1,<3.0.0 
│   │   │   ├── cachetools >=2.0.0,<6.0 

google-auth sets an upper limit for cachetools. Confirmed here

So the resolver finds the version of google-auth without this constraint

├── google-cloud-storage *
│   ├── google-auth >=1.2.0 
│   │   ├── cachetools >=2.0.0 

We can skip this version of cachetools

[kevinjqliu]

@dependabot ignore this major version

Reason: google-auth sets an upper limit for cachetools. https://github.com/googleapis/google-auth-library-python/blob/ca94ead4035beea4741dc5384449032f8e6f75d8/setup.py#L23

[dependabot]

OK, I won't notify you about version 6.x.x again, unless you re-open this PR.

[lwfitzgerald]

@kevinjqliu / @Fokko Please can we re-open this to allow an upgrade to 6.2.0 since google-auth>=2.41.0 now supports cachetools 6.x.x - https://github.com/googleapis/google-auth-library-python/releases/tag/v2.41.0 (pyiceberg already updated to this in #2547)

[Fokko]

@dependabot recreate

[dependabot]

Looks like this PR is closed. If you re-open it I'll rebase it as long as no-one else has edited it (you can use @dependabot reopen if the branch has been deleted).

[Fokko]

@dependabot reopen

[Fokko]

@lwfitzgerald Sure thing, thanks for the heads-up!

[Fokko]

Thanks again @lwfitzgerald