Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 20, 2025

Bumps net.snowflake:snowflake-jdbc from 3.26.1 to 3.27.0.

Release notes

Sourced from net.snowflake:snowflake-jdbc's releases.

v3.27.0

Changelog

Sourced from net.snowflake:snowflake-jdbc's changelog.

For all official JDBC Release Notes please refer to https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc

Changelog

  • v3.27.1-SNAPSHOT

    • Added platform detection on login to set PLATFORM metric in CLIENT_ENVIRONMENT
    • Disable DatabaseMetaDataLatestIT::testUseConnectionCtx test
    • Fix IT tests to construct OAuth scopes correctly
    • Fix exponential backoff retry time for non-auth requests
    • Upgrade aws-sdk to 1.12.792 and add STS dependency
    • Add rockylinux9 CI tests as part of RHEL 9 support
    • Bumped grpc-java to 1.76.0 to address CVE-2025-58056 from transient dep
    • Added workloadIdentityImpersonationPath config option for authenticator=WORKLOAD_IDENTITYsnowflakedb/snowflake-jdbc#2348workloadIdentityImpersonationPath config option for authenticator=WORKLOAD_IDENTITYsnowflakedb/snowflake-jdbc#2348
    • snowflakedb/snowflake-jdbc#2364
  • v3.27.0

    • Added the changelog.yml GitHub workflow to ensure changelog is updated on release PRs.
    • Added HTTP 307 & 308 retries in case of internal IP redirects
    • Make PAT creation return ResultSet when using execute method
    • Renamed CRL_REVOCATION_CHECK_MODE to CERT_REVOCATION_CHECK_MODE in CLIENT_ENVIRONMENT metrics
    • Test coverage for multistatement jdbc.
    • Fixed permission check for .toml config file.
    • Bumped netty to 4.1.127.Final to address CVE-2025-58056 and CVE-2025-58057
    • Add support for x-snowflake-session sticky HTTP session header returned by Snowflake
    • Added support for Interval Year-Month and Day-Time types in JDBC.
    • Added support for Decfloat types in JDBC.
    • Fixed pattern search for file when QUOTED_IDENTIFIERS_IGNORE_CASE enabled
    • Added support for CRL (certificate revocation list).
Commits
  • 934f59d NO-SNOW: Bump version to v3.27.0 (#2359)
  • 2cb50a6 SNOW-2256742: Add support for x-snowflake-session sticky HTTP header (#2357)
  • 9a21ba4 SNOW-2328154, SNOW-2328155: Support Interval Year-Month and Day-Time reads an...
  • b915345 SNOW-2372999: Prepared-statement fixing-flaky test (#2356)
  • 90ccb7b NO-SNOW bump netty for CVE-2025-58056 (#2354)
  • ffce4c6 SNOW-2161718-JDBC-fix-permission-check-for-toml-config (#2270)
  • a84df02 Snow 2234383 test coverage for multistatement jdbc (#2318)
  • ce589ff NO-SNOW: Renamed DESCRIPTION.md to CHANGELOG.md (#2352)
  • a91f741 NO-SNOW: Fix CERT_REVOCATION_CHECK_MODE client_environment property name (#2349)
  • c1d706f SNOW-2323439: Make PAT creation return ResultSet (#2343)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 20, 2025
@amazon-inspector-n-virginia
Copy link

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

1 similar comment
@amazon-inspector-n-virginia
Copy link

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@github-actions github-actions bot enabled auto-merge (squash) October 20, 2025 06:17
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@amazon-inspector-n-virginia
Copy link

✅ I finished the code review, and didn't find any security or code quality issues.

1 similar comment
@amazon-inspector-n-virginia
Copy link

✅ I finished the code review, and didn't find any security or code quality issues.

@codecov
Copy link

codecov bot commented Oct 20, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 64.61%. Comparing base (fe0a5d9) to head (a0469cd).
⚠️ Report is 73 commits behind head on master.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@             Coverage Diff              @@
##             master    #3074      +/-   ##
============================================
+ Coverage     63.67%   64.61%   +0.93%     
- Complexity     4344     4613     +269     
============================================
  Files           621      635      +14     
  Lines         23286    24104     +818     
  Branches       2859     2993     +134     
============================================
+ Hits          14827    15574     +747     
- Misses         7070     7094      +24     
- Partials       1389     1436      +47     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps [net.snowflake:snowflake-jdbc](https://github.com/snowflakedb/snowflake-jdbc) from 3.26.1 to 3.27.0.
- [Release notes](https://github.com/snowflakedb/snowflake-jdbc/releases)
- [Changelog](https://github.com/snowflakedb/snowflake-jdbc/blob/master/CHANGELOG.md)
- [Commits](snowflakedb/snowflake-jdbc@v3.26.1...v3.27.0)

---
updated-dependencies:
- dependency-name: net.snowflake:snowflake-jdbc
  dependency-version: 3.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-3.27.0 branch from a0469cd to 391cc85 Compare October 23, 2025 16:39
Copy link
Contributor

@github-actions github-actions bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm approving this pull request because it includes a patch or minor update

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2025

Superseded by #3091.

@dependabot dependabot bot closed this Nov 3, 2025
auto-merge was automatically disabled November 3, 2025 06:11

Pull request was closed

@dependabot dependabot bot deleted the dependabot/maven/net.snowflake-snowflake-jdbc-3.27.0 branch November 3, 2025 06:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant