Releases: snowflakedb/snowflake-connector-python
Releases · snowflakedb/snowflake-connector-python
3.17.2
3.17.1
- v3.17.1(August 17,2025)
- Added
infer_schema
parameter towrite_pandas
to perform schema inference on the passed data. - Namespace
snowlake
reverted back to non-module.
- Added
3.17.0
- v3.17.0(August 16,2025)
- Added in-band HTTP exception telemetry.
- Added an
unsafe_skip_file_permissions_check
flag to skip file permission checks on the cache and configuration. - Added
APPLICATION_PATH
withinCLIENT_ENVIRONMENT
to distinguish between multiple scripts using the Python Connector in the same environment. - Added basic JSON support for Interval types.
- Added in-band OCSP exception telemetry.
- Added support for new authentication methods with Workload Identity Federation (WIF).
- Added the
WORKLOAD_IDENTITY
value for the authenticator type. - Added the
workload_identity_provider
andworkload_identity_entra_resource
parameters.
- Added the
- Added support for the
use_vectorized_scanner
parameter in the write_pandas function. - Added support of proxy setup using connection parameters without emitting environment variables.
- Added populating of
type_code
inResultMetadata
for interval types. - Introduced the
snowflake_version
property to the connection. - Moved
OAUTH_TYPE
toCLIENT_ENVIROMENT
. - Relaxed the
pyarrow
version constrain; versions >= 19 can now be used. - Disabled token caching for OAuth Client Credentials authentication.
- Fixed OAuth authenticator values.
- Fixed a bug where a PAT with an external session authenticator was used while
external_session_id
was not provided inSnowflakeRestful.fetch
. - Fixed the case-sensitivity of
Oauth
andprogrammatic_access_token
authenticator values. - Fixed unclear error messages for incorrect
authenticator
values. - Fixed GCS staging by ensuring the endpoint has a scheme.
- Fixed a bug where time-zoned timestamps fetched as a
pandas.DataFrame
orpyarrow.Table
would overflow due to unnecessary precision. A clear error will now be raised if an overflow cannot be prevented.
3.16.0
- v3.16.0(July 04,2025)
- Bumped numpy dependency from <2.1.0 to <=2.2.4.
- Added Windows support for Python 3.13.
- Added
bulk_upload_chunks
parameter towrite_pandas
function. Setting this parameter to True changes the behaviour of write_pandas function to first write all the data chunks to the local disk and then perform the wildcard upload of the chunks folder to the stage. In default behaviour the chunks are being saved, uploaded and deleted one by one. - Added support for new authentication mechanism PAT with external session ID.
- Added
client_fetch_use_mp
parameter that enables multiprocessed fetching of result batches. - Added basic arrow support for Interval types.
- Fixed
write_pandas
special characters usage in the location name. - Fixed usage of
use_virtual_url
when building the location for gcs storage client. - Added support for Snowflake OAuth for local applications.
3.15.0
- v3.15.0(Apr 29,2025)
- Bumped up min boto and botocore version to 1.24.
- OCSP: terminate certificates chain traversal if a trusted certificate already reached.
- Added new authentication methods support for programmatic access tokens (PATs), OAuth 2.0 Authorization Code Flow, OAuth 2.0 Client Credentials Flow, and OAuth Token caching.
- For OAuth 2.0 Authorization Code Flow:
- Added the
oauth_client_id
,oauth_client_secret
,oauth_authorization_url
,oauth_token_request_url
,oauth_redirect_uri
,oauth_scope
,oauth_disable_pkce
,oauth_enable_refresh_tokens
andoauth_enable_single_use_refresh_tokens
parameters. - Added the
OAUTH_AUTHORIZATION_CODE
value for the parameter authenticator.
- Added the
- For OAuth 2.0 Client Credentials Flow:
- Added the
oauth_client_id
,oauth_client_secret
,oauth_token_request_url
, andoauth_scope
parameters. - Added the
OAUTH_CLIENT_CREDENTIALS
value for the parameter authenticator.
- Added the
- For OAuth Token caching: Passing a username to driver configuration is required, and the
client_store_temporary_credential property
is to be set totrue
.
- For OAuth 2.0 Authorization Code Flow:
3.14.1
- v3.14.1(April 21, 2025)
- Added support for Python 3.13.
- NOTE: Windows 64 support is still experimental and should not yet be used for production environments.
- Dropped support for Python 3.8.
- Added basic decimal floating-point type support.
- Added experimental authentication methods.
- Added support of GCS regional endpoints.
- Added support of GCS virtual urls. See more: https://cloud.google.com/storage/docs/request-endpoints#xml-api
- Added
client_fetch_threads
experimental parameter to better utilize threads for fetching query results. - Added
check_arrow_conversion_error_on_every_column
connection property that can be set toFalse
to restore previous behaviour in which driver will ignore errors until it occurs in the last column. This flag's purpose is to unblock workflows that may be impacted by the bugfix and will be removed in later releases. - Lowered log levels from info to debug for some of the messages to make the output easier to follow.
- Allowed the connector to inherit a UUID4 generated upstream, provided in statement parameters (field:
requestId
), rather than automatically generate a UUID4 to use for the HTTP Request ID. - Improved logging in urllib3, boto3, botocore - assured data masking even after migration to the external owned library in the future.
- Improved error message for client-side query cancellations due to timeouts.
- Improved security and robustness for the temporary credentials cache storage.
- Fixed a bug that caused driver to fail silently on
TO_DATE
arrow to python conversion when invalid date was followed by the correct one. - Fixed expired S3 credentials update and increment retry when expired credentials are found.
- Deprecated
insecure_mode
connection property and replaced it withdisable_ocsp_checks
with the same behavior as the former property.
- Added support for Python 3.13.
3.14.0
- v3.14.0(March 03, 2025)
- Bumped pyOpenSSL dependency upper boundary from <25.0.0 to <26.0.0.
- Added a <19.0.0 pin to pyarrow as a workaround to a bug affecting Azure Batch.
- Optimized distribution package lookup to speed up import.
- Fixed a bug where privatelink OCSP Cache url could not be determined if privatelink account name was specified in uppercase.
- Added support for iceberg tables to
write_pandas
. - Fixed base64 encoded private key tests.
- Fixed a bug where file permission check happened on Windows.
- Added support for File types.
- Added
unsafe_file_write
connection parameter that restores the previous behaviour of saving files downloaded with GET with 644 permissions.
3.13.2
- v3.13.2(January 29, 2025)
- Changed not to use scoped temporary objects.
3.13.1
- v3.13.1(January 29, 2025)
- Remedied SQL injection vulnerability in snowflake.connector.pandas_tools.write_pandas. See more GHSA-2vpq-fh52-j3wv
- Remedied vulnerability in deserialization of the OCSP response cache. See more: GHSA-m4f6-vcj4-w5mx
- Remedied vulnerability connected to cache files permissions. See more: GHSA-r2x6-cjg7-8r43
3.13.0
- v3.13.0(January 23,2025)
- Added a feature to limit the sizes of IO-bound ThreadPoolExecutors during PUT and GET commands.
- Updated README.md to include instructions on how to verify package signatures using
cosign
. - Updated the log level for cursor's chunk rowcount from INFO to DEBUG.
- Added a feature to verify if the connection is still good enough to send queries over.
- Added support for base64-encoded DER private key strings in the
private_key
authentication type.