Skip to content

chore(deps): bump snowflake-sdk from 2.4.0 to 3.3.0 - #992

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/snowflake-sdk-3.3.0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/snowflake-sdk-3.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 7, 2026 •

Copy link
Copy Markdown
Contributor

Bumps snowflake-sdk from 2.4.0 to 3.3.0.

Release notes

Sourced from snowflake-sdk's releases.

Release

Release

Release

Release

Release

Release

Release

Changelog

Sourced from snowflake-sdk's changelog.

3.3.0

Changes:

  • snowflakedb/snowflake-connector-nodejs#1471
  • Restricted the WORKLOAD_IDENTITY authenticator to recognized Snowflake hosts (*.snowflakecomputing.com/.cn/.mil). Use SNOWFLAKE_WIF_ALLOWED_HOST_SUFFIXESsnowflakedb/snowflake-connector-nodejs#1472

Bugfixes:

  • snowflakedb/snowflake-connector-nodejs#1473

3.2.0

Changes:

  • Marked RowStatement.fetchRows() as deprecated. This method will be removed in the next major version; use streamRows()snowflakedb/snowflake-connector-nodejs#1463
  • Removed the getRowValue() and getRowValueAsString() methods from the Columnsnowflakedb/snowflake-connector-nodejs#1463

Bugfixes:

  • Fixed the TypeScript typing for connection.fetchResult(), which incorrectly required sqlText and omitted queryIdsnowflakedb/snowflake-connector-nodejs#1462
  • snowflakedb/snowflake-connector-nodejs#1459
  • Fixed compressFileWithGZIP crashing the Node process with an unhandled stream 'error' event when the source file for a PUTsnowflakedb/snowflake-connector-nodejs#1454
  • snowflakedb/snowflake-connector-nodejs#1456

Internal:

  • snowflakedb/snowflake-connector-nodejs#1469

3.1.0

New features:

  • Added workloadIdentityAwsUseOutboundToken connection option (default false) that switches AWS Workload Identity attestation to STS GetWebIdentityTokensnowflakedb/snowflake-connector-nodejs#1437
  • Added a customLogger option to snowflake.configure()snowflakedb/snowflake-connector-nodejs#1438

Bugfixes:

  • Fixed PrivateLink OCSP proxy requests failing with HTTP 405 Method Not Allowed for certificates whose AIA OCSP URI contains a path component (e.g. oneocsp.microsoft.com/ocsp). The driver now sends GET requests to the /retry/snowflakedb/snowflake-connector-nodejs#1449
  • snowflakedb/snowflake-connector-nodejs#1415GetCallerIdentity to STS GetWebIdentityToken. AWS Workload Identity again defaults to GetCallerIdentity; the new method is now opt-in via workloadIdentityAwsUseOutboundTokensnowflakedb/snowflake-connector-nodejs#1437
  • Removed usage of deprecated util.isStringsnowflakedb/snowflake-connector-nodejs#1436
  • Fixed CRL validation failing with crl.tbsCertList.revokedCertificates is not iterable for CRLs that contain no revoked certificates, where the OPTIONAL revokedCertificatessnowflakedb/snowflake-connector-nodejs#1448
  • snowflakedb/snowflake-connector-nodejs#1440
  • Fixed key-pair authentication ignoring privateKeyPass for an inline privateKey, so encrypted private keys can now be passed directly just like in privateKeyPathsnowflakedb/snowflake-connector-nodejs#1450
  • Fixed a race condition that could crash the Node process with Error: abortedsnowflakedb/snowflake-connector-nodejs#1453

Internal:

  • snowflakedb/snowflake-connector-nodejs#1443

... (truncated)

Commits
  • 9a0bc71 3.3.0 release (#1474)
  • 224f0fa SNOW-3649870 CSP response validation improvements (#1473)
  • 070d9fe Restrict WORKLOAD_IDENTITY to recognized Snowflake hosts (#1472)
  • f96cd15 Logging hardening: correct SAS masking + extend cloud-URL query-param masking...
  • 55673bd 3.2.0 Release (#1470)
  • bfd7e61 snow-3784415 token cache key v2 fixup (#1456)
  • f5da5e4 Improve crl signature verification performance (#1469)
  • 66a921f Fix Node process crash in compressFileWithGZIP on unreadable PUT source (#1454)
  • d12746f SNOW-3854016 Use stageInfo endPoint in azure_util.js to support Azure Gov (#1...
  • 0dc2f3e SNOW-3887909 bump GitHub Actions to Node 24-compatible majors (#1460)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/snowflake-sdk-3.3.0 branch 4 times, most recently from 7bebed9 to 5c8b77a Compare October 8, 2026 08:21
Bumps [snowflake-sdk](https://github.com/snowflakedb/snowflake-connector-nodejs) from 2.4.0 to 3.3.0.
- [Release notes](https://github.com/snowflakedb/snowflake-connector-nodejs/releases)
- [Changelog](https://github.com/snowflakedb/snowflake-connector-nodejs/blob/master/CHANGELOG.md)
- [Commits](snowflakedb/snowflake-connector-nodejs@v2.4.0...v3.3.0)

---
updated-dependencies:
- dependency-name: snowflake-sdk
  dependency-version: 3.3.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/snowflake-sdk-3.3.0 branch from 5c8b77a to 0a5e0c6 Compare October 9, 2026 03:24

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants