[dependabot]

Bumps snowflake-connector-python from 5.0.0 to 5.1.0.

Release notes

Sourced from snowflake-connector-python's releases.

snowflake-connector-python v5.1.0

5.1.0 (October 21, 2026)

New features:

• Added support for Python 3.14t (free-threaded CPython).

Bug fixes:

• Fixed statement-level TIMEZONE overrides so a registered TIMEZONE can be set on a statement and is sent on the query request.
• Fixed stage uploads and downloads so a failed system certificate load is retried, instead of failing the storage client or skipping the operating-system trust store.
• Changed TLS certificate checks for RUSTSEC-2026-0382 by updating bundled root certificates and distrusting compromised intermediate Certificate Authority (CA) certificates.

Changes:

• Changed login to omit CLIENT_SESSION_KEEP_ALIVE and CLIENT_PREFETCH_THREADS unless the caller sets them.
• Changed login to send CLIENT_SESSION_KEEP_ALIVE, CLIENT_PREFETCH_THREADS, QUERY_TAG, and a heartbeat frequency clamped to 900–3600 seconds as session parameters, and to send a set validate_default_parameters value, true or false, as CLIENT_VALIDATE_DEFAULT_PARAMETERS, leaving that parameter off the login request when it is unset.
• Changed login to send TIMEZONE, AUTOCOMMIT, CLIENT_TIMESTAMP_TYPE_MAPPING, CLIENT_METADATA_REQUEST_USE_CONNECTION_CTX, SERVICE_NAME, GCS_USE_DOWNSCOPED_CREDENTIAL, and CLIENT_OUT_OF_BAND_TELEMETRY_ENABLED as session parameters when they are set.
• Removed disable_console_login and oauth_disable_console_login. Passing either connection parameter warns and has no effect, and external browser login always requests the SSO URL from Snowflake.
• Removed OCSP_MODE from the login client environment and from connection diagnostics. The driver does not perform OCSP; certificate revocation continues to be reported as CERT_REVOCATION_CHECK_MODE.
• Changed GCS PUT to omit the Content-Encoding header.

Commits

• 17dda9d NO-SNOW: Remove empty line from README
• 907bc75 [Node] bump version to 4.0.0-alpha.1
• 0812fec NO-SNOW: Cut off the ODBC changelog at v4.2.0
• fd60f7c SNOW-3894967: nodejs - add logger, configure with logLevel, logFilePath, addi...
• 3345a2f NO-SNOW: Bump python driver to 5.1.0
• 04d7dca NO-SNOW: Prepare JDBC PrPr release 0.0.6
• c194627 Bump bundled TLS roots and certificate path checks
• 3a55025 SNOW-3894966: [Node] Report chunk download failures as 402001 and 402002
• 5103d92 NO-SNOW: Keep Node e2e on 22 and auth and WIF on 24
• 48929db SNOW-4300587: Tableau/generic replay navigate and load
• Additional commits viewable in compare view

[github-actions]

requirements.txt / pylock.toml drift (unsigned push blocked)

uv.lock / pyproject.toml changed but GitHub Actions cannot push an unsigned commit under the required_signatures ruleset (#1419).

Option A — signed commit on this Dependabot branch:

git fetch origin pull/2132/head:dependabot-review
git checkout dependabot-review
uv export --frozen --no-emit-project -o requirements.txt
uv export --format pylock.toml --frozen --all-extras --all-groups --output-file pylock.toml
git add requirements.txt pylock.toml
git commit -S -m "chore(deps): regenerate requirements.txt and pylock.toml after uv.lock update"
git push origin "HEAD:<dependabot-branch-name>"

Option B — supersede PR: apply the bump + export locally with signed commits (see CONTRIBUTING.md).

Download the CI-generated requirements.txt and pylock.toml from the workflow artifact on this run when present.

[github-actions]

requirements.txt / pylock.toml drift (unsigned push blocked)

uv.lock / pyproject.toml changed but GitHub Actions cannot push an unsigned commit under the required_signatures ruleset (#1419).

Option A — signed commit on this Dependabot branch:

git fetch origin pull/2132/head:dependabot-review
git checkout dependabot-review
uv export --frozen --no-emit-project -o requirements.txt
uv export --format pylock.toml --frozen --all-extras --all-groups --output-file pylock.toml
git add requirements.txt pylock.toml
git commit -S -m "chore(deps): regenerate requirements.txt and pylock.toml after uv.lock update"
git push origin "HEAD:<dependabot-branch-name>"

Option B — supersede PR: apply the bump + export locally with signed commits (see CONTRIBUTING.md).

Download the CI-generated requirements.txt and pylock.toml from the workflow artifact on this run when present.

[dependabot]

Superseded by #2148.