diff --git a/setup.py b/setup.py
index 8c7b9c0..f14b68a 100644
--- a/setup.py
+++ b/setup.py
@@ -28,6 +28,7 @@
     "google-api-core[grpc] >= 1.22.2, < 2.0.0dev",
     "libcst >= 0.2.5",
     "proto-plus >= 1.4.0",
+    "packaging >= 14.3",
     "grpc-google-iam-v1",
 ]
 
diff --git a/testing/constraints-3.6.txt b/testing/constraints-3.6.txt
index e58b08e..477e2dc 100644
--- a/testing/constraints-3.6.txt
+++ b/testing/constraints-3.6.txt
@@ -23,3 +23,5 @@ google-api-core==1.22.2
 grpc-google-iam-v1==0.12.3
 libcst==0.2.5
 proto-plus==1.4.0
+packaging==14.3
+google-auth==1.24.0  # TODO: remove when google-auth>=1.25.0 si transitively required through google-api-core