diff --git a/poetry.lock b/poetry.lock
index 8463530b9..c2347f75e 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1160,14 +1160,14 @@ files = [
 
 [[package]]
 name = "oauthlib"
-version = "3.3.1"
+version = "4.0.0"
 description = "A generic, spec-compliant, thorough implementation of the OAuth request-signing logic"
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "oauthlib-3.3.1-py3-none-any.whl", hash = "sha256:88119c938d2b8fb88561af5f6ee0eec8cc8d552b7bb1f712743136eb7523b7a1"},
-    {file = "oauthlib-3.3.1.tar.gz", hash = "sha256:0f0f8aa759826a193cf66c12ea1af1637f87b9b4622d46e866952bb022e538c9"},
+    {file = "oauthlib-4.0.0-py3-none-any.whl", hash = "sha256:624c28c13a0a59cabf9747dfa52af63be3e512a7f2714df16e91b5b3a145e6cd"},
+    {file = "oauthlib-4.0.0.tar.gz", hash = "sha256:efb274799819440f95b4ab3b818869f1ce9ae26c5beacba0201d1a1b76b54f86"},
 ]
 
 [package.extras]
@@ -2052,4 +2052,4 @@ pyarrow = ["pyarrow", "pyarrow", "pyarrow"]
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.10"
-content-hash = "e68813b0ffe8e64773075827abc976e3db852a0096a6a381731617b80ff75e7b"
+content-hash = "0f21679cf1eb7ce3b9ae475cf59ef1d69b26dfaef9d94f3486edaba4ccb4518c"
diff --git a/pyproject.toml b/pyproject.toml
index 38263823d..9e29fa065 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -34,7 +34,7 @@ lz4 = [
     { version = "^4.4.5", python = ">=3.14" }
 ]
 requests = "^2.18.1"
-oauthlib = "^3.1.0"
+oauthlib = ">=3.1.0,<5.0.0"
 openpyxl = "^3.0.10"
 urllib3 = ">=1.26"
 python-dateutil = "^2.8.0"