[dependabot]

Bumps snowflake-connector-python from 4.7.3 to 5.0.0.

Release notes

Sourced from snowflake-connector-python's releases.

snowflake-connector-python v5.0.0

5.0.0 (October 15, 2026)

Breaking changes:

• Changed an empty connections.toml so connections defined in config.toml are kept.
• Changed ConfigManager with no file_path so reading an option raises MissingConfigOptionError instead of ConfigManagerError.
• Changed a bare connect() so a detected application name — from the SF_PARTNER environment variable, or from an imported Streamlit, Jupyter, or snowbooks module — takes precedence over application in the default connection profile.
• Changed client_session_keep_alive and client_session_keep_alive_heartbeat_frequency to read-only properties; assigning them raises AttributeError.
• Removed snowflake.connector.config_manager.CONFIG_PARSER; use CONFIG_MANAGER.
• Removed ConfigManager.add_subparser() and ConfigManager._sub_parsers; use add_submanager() and _sub_managers.
• Removed the public Connection.connect() method; the session is opened when the connection is constructed.
• Removed the region connection parameter and Connection.region; pass a fully qualified account or set host instead.
• Removed the backoff_policy callable; retry delays are set with retry_backoff_base_ms, retry_backoff_cap_ms, retry_backoff_factor, and retry_backoff_jitter, the default initial delay is 250 ms (was 1 s), and the default jitter is decorrelated (was full).
• Removed Connection.disable_request_pooling; passing disable_request_pooling to connect() warns and has no effect.
• Removed the converter_class connection parameter and DefaultConverterClass; passing converter_class raises ProgrammingError.
• Changed OAuth login failures for a bad client secret to include the identity provider's error name, such as invalid_client, in the exception message.
• Changed session-token login so master_token is required and invalid tokens fail in connect() instead of on a later request.
• Changed OAuth token and authorization endpoint URL validation to require HTTPS; http:// is allowed only for loopback addresses.
• Changed external-browser login so a mid-session master-token expiry raises ReauthenticationRequest instead of opening the browser again and retrying the query.
• Changed EXTERNALBROWSER login so disable_console_login warns and has no effect: the parameter defaults to false, and the driver always requests the SSO URL from Snowflake instead of opening /console/login.
• Removed the password_callback connection parameter; passing it raises ProgrammingError, and an expired password must be changed outside the driver.
• Changed cursor session parameters so a change on one cursor is visible to other cursors on the same connection without those cursors running a query.
• Changed methods on a closed cursor to raise InterfaceError; fetchone, fetchmany, fetchall, and reset still read rows already buffered on an open cursor after connection.close().
• Changed fetchone, fetchmany, fetchall, and cursor iteration before any query to raise ProgrammingError instead of TypeError.
• Changed cursor.execute so passing file_stream on a statement that is not a PUT raises ProgrammingError.
• Changed fetch_pandas_all, fetch_pandas_batches, and the fetch_arrow_* methods so a JSON result, such as SHOW or DESCRIBE, returns a DataFrame or Arrow table instead of raising NotSupportedError.
• Changed executemany() on an INSERT without a VALUES clause to raise ProgrammingError instead of InterfaceError.
• Removed the create_temp_table argument from write_pandas; pass table_type='temp' instead.
• Removed ResultBatch.session_manager and ResultBatch.http_config.
• Changed result-chunk fetching to always use a thread pool: client_fetch_use_mp warns and no longer selects a process pool, and client_fetch_threads is a deprecated alias of client_prefetch_threads.
• Changed PUT so symlinks in a source path are resolved before upload: a symlinked file is stored under the target file's name, and a relative path that walks through a symlink and .. can select a different file.
• Removed iobound_tpe_limit; passing it to connect() warns and has no effect, and Connection.iobound_tpe_limit does not exist.
• Changed proxy selection so an explicit proxy_host/proxy_port or proxy URL wins when HTTP_PROXY, HTTPS_PROXY, or NO_PROXY is also set.
• Changed CRL caching so enable_crl_cache=False warns and no longer disables it; set both enable_crl_memory_cache and enable_crl_file_cache to False to turn caching off.
• Changed FIPS support so it is available only when the Python connector is installed from source with SNOWFLAKE_FIPS=1; see the installation instructions for details.
• Removed support of OCSP certificate validation in favor of CRL validation.
• Removed YAML easy-logging configuration; troubleshooting logs are enabled with the SNOWFLAKE_TROUBLESHOOTING_ENABLED environment variable.
• Removed the snowflake.connector.options module; importing it raises ModuleNotFoundError.
• Removed snowflake.connector.dbapi and the authenticator classes previously exported from snowflake.connector.auth.
• Removed file-transfer and type-helper exports from snowflake.connector.constants, including FileTransferType, ResultStatus, cloud filesystem labels, part-size constants, the get_*_types and is_*_type_name helpers, and the Arrow type helpers; QueryStatus remains.
• Removed DownloadMetrics, RemoteChunkInfo, and the chunk-download constants DOWNLOAD_TIMEOUT, MAX_DOWNLOAD_RETRY, SSE_C_AES, SSE_C_ALGORITHM, and SSE_C_KEY from snowflake.connector.result_batch.

New features:

• Added an asyncio-compatible API under snowflake.connector.aio, including nonblocking connection, query, fetch, transaction, Arrow, pandas, and async context-manager operations.

• Added the use_core_arrow connection parameter to opt into native Rust conversion for row, Arrow, and pandas result fetching in the synchronous and asyncio APIs. Bug fixes:

• Fixed PUT SOURCE_COMPRESSION=AUTO_DETECT so a .deflate file is recognized as DEFLATE.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)