Skip to content

chore(deps): upgrade Snowflake connector to 4.7.2 - #124

Merged
mfranczel merged 1 commit into
mainfrom
mf/update-snowflake-connector
Sep 1, 2026
Merged

chore(deps): upgrade Snowflake connector to 4.7.2#124
mfranczel merged 1 commit into
mainfrom
mf/update-snowflake-connector

Conversation

@mfranczel

@mfranczel mfranczel commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Summary

Upgrade snowflake-connector-python from 4.4.0 to 4.7.2.

This resolves CVE-2026-15925, an improper TLS hostname verification vulnerability fixed in version 4.7.1. Version
4.7.2 includes the security fix and subsequent bug fixes.

Compatibility

  • Retains the <5 upper bound for compatibility with snowflake-sqlalchemy
  • Supports the project's Python range (>=3.10,<3.14)
  • No breaking changes affecting the existing Snowflake integration were identified

Resolves BLU-6333

Summary by CodeRabbit

  • Chores
    • Updated the Snowflake connector dependency to version 4.7.2 or later, while remaining below version 5.

@coderabbitai

coderabbitai Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Essentials

Run ID: e30f9ea0-177f-4f91-993e-69489699f59b

📥 Commits

Reviewing files that changed from the base of the PR and between 2110a81 and d03a778.

⛔ Files ignored due to path filters (1)
  • poetry.lock is excluded by !**/*.lock
📒 Files selected for processing (1)
  • pyproject.toml

Included review availability: 3 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 4 reviews per hour.


📝 Walkthrough

Walkthrough

The project configuration now requires snowflake-connector-python>=4.7.2,<5 unconditionally. This replaces separate requirements for older Python versions and Python 3.13 or newer.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to d03a7

This PR updates the Snowflake connector and lockfile without any identified merge-blocking risk; it is ready to merge after normal checks and review.

Suggested reviewers: m1so, tkislan

🚥 Pre-merge checks | ✅ 6
✅ Passed checks (6 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Updates Docs ✅ Passed PASS: The pull request does not implement a feature. The exact diff against origin/main changes only pyproject.toml and poetry.lock to upgrade snowflake-connector-python from 4.4.0 to 4.7.2. No public…
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency upgrade to Snowflake connector version 4.7.2.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Updates Docs

Explanation

PASS: The pull request does not implement a feature. The exact diff against origin/main changes only pyproject.toml and poetry.lock to upgrade snowflake-connector-python from 4.4.0 to 4.7.2. No public API, runtime feature, or product behavior is added. Therefore, the documentation-update condition is not applicable.


Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Sep 1, 2026

Copy link
Copy Markdown

📦 Python package built successfully!

  • Version: 2.5.1.dev2+6341b8d
  • Wheel: deepnote_toolkit-2.5.1.dev2+6341b8d-py3-none-any.whl
  • Install:
    pip install "deepnote-toolkit @ https://deepnote-staging-runtime-artifactory.s3.amazonaws.com/deepnote-toolkit-packages/2.5.1.dev2%2B6341b8d/deepnote_toolkit-2.5.1.dev2%2B6341b8d-py3-none-any.whl"

@mfranczel
mfranczel requested a review from m1so September 1, 2026 14:17
@mfranczel mfranczel self-assigned this Sep 1, 2026
@mfranczel
mfranczel marked this pull request as ready for review September 1, 2026 14:17
@mfranczel
mfranczel requested a review from a team as a code owner September 1, 2026 14:17
@codecov

codecov Bot commented Sep 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.46%. Comparing base (2110a81) to head (d03a778).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #124   +/-   ##
=======================================
  Coverage   74.46%   74.46%           
=======================================
  Files          95       95           
  Lines        5707     5707           
  Branches      851      851           
=======================================
  Hits         4250     4250           
  Misses       1180     1180           
  Partials      277      277           
Flag Coverage Δ
combined 74.46% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

@deepnote-bot

Copy link
Copy Markdown

🚀 Review App Deployment Started

📝 Description 🌐 Link / Info
🌍 Review application ra-124
🔑 Sign-in URL Click to sign-in
📊 Application logs View logs
🔄 Actions Click to redeploy
🚀 ArgoCD deployment View deployment
Last deployed 2026-09-01 14:28:52 (UTC)
📜 Deployed commit cfbeaf68bf94d189fa773d95d177f37c2a569244
🛠️ Toolkit version 6341b8d

@linear-code

linear-code Bot commented Sep 1, 2026

Copy link
Copy Markdown

BLU-6333

@mfranczel
mfranczel merged commit a602f87 into main Sep 1, 2026
33 checks passed
@mfranczel
mfranczel deleted the mf/update-snowflake-connector branch September 1, 2026 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants