diff --git a/plugins/bigquery/setup.py b/plugins/bigquery/setup.py
index 57852901049..eb723820e8a 100644
--- a/plugins/bigquery/setup.py
+++ b/plugins/bigquery/setup.py
@@ -40,7 +40,12 @@
     },
     install_requires=[
         'dbt-core=={}'.format(package_version),
-        'google-cloud-bigquery>=1.15.0,<2',
+        'google-cloud-core>=1,<=1.1.0',
+        'google-cloud-bigquery>=1.15.0,<1.24.0',
+        # hidden secret dependency: bq requires this but only documents 1.10.0
+        # through its dependency chain.
+        # see https://github.com/googleapis/google-cloud-python/issues/9965
+        'six>=1.13.0',
     ],
     zip_safe=False,
     classifiers=[