Snowflake Connector for Python release notes for 2024¶

This article contains the release notes for the Snowflake Connector for Python, including the following when applicable:

Snowflake uses semantic versioning for Snowflake Connector for Python updates.

Version 3.12.0 (July 26, 2024)¶

Set the default connection timeout to 10 seconds and the socket read time to 10 minutes for HTTP calls in file transfers.
Added the ability to connect to multiple domains.
Optimized to_pandas() performance by using fully-parallel downloading logic.
Bumped the keyring dependency from g>=23.1.0,<25.0.0 to g>=23.1.0,<26.0.0.

Fixed a bug where specifying client_session_keep_alive_heartbeat_frequency in snowflake-sqlalchemy could make the connector unresponsive.
Fixed an incorrect private_key connection parameter type hint.

Added support for the token_file_path connection parameter to read an OAuth token from a file when connecting to Snowflake.
Added support for the debug_arrow_chunk connection parameter to allow debugging raw arrow data in cases of arrow data parsing failures.
Added support for the disable_saml_url_check connection parameter to disable SAML URL checks in OKTA authentication.

Fixed a bug where OCSP certificates signed using SHA384 algorithm cannot be verified.
Fixed a bug where the status code showed as uploaded when a PUT command failed with a 400 error.
Fixed a bug where a PermissionError was raised when the current user does not have the right permission on parent directory of configuration file path.
Fixed a bug where an OCSP GET URL is not encoded correctly when it contains a slash.
Fixed a bug where an SSO URL didn’t accept : in a query parameter, such as in https://sso.abc.com/idp/startSSO.ping?PartnerSpId=https://xyz.snowflakecomputing.com/.

Removed an incorrect error log message that could occur during arrow data conversion.

Fixed an issue that caused a HTTP 400 error when connecting to a China endpoint.

Improved externalbrowser authentication in containerized environments:
- Instructs the browser to not fetch /favicon on a success page.
- Uses a simple retry strategy for an empty socket.recv call.
- Adds a SNOWFLAKE_AUTH_SOCKET_REUSE_PORT flag (SNOWFLAKE_AUTH_SOCKET_REUSE_PORT=true) to set the underlying socket’s SO_REUSEPORT flag (as described in the socket man page).
  - Setting this flag can be useful when the randomized port used in the localhost callback url is being followed before the container engine completes port forwarding to host.
  - You can then statically map a port between your host and container and allow that port to be reused in rapid succession with a command similar to the following:
    SF_AUTH_SOCKET_PORT=3037 SNOWFLAKE_AUTH_SOCKET_REUSE_PORT=true poetry run python somescript.py
    Copy
- Adds a SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAIT flag (SNOWFLAKE_AUTH_SOCKET_MSG_DONTWAIT=true) to make a non-blocking socket.recv call and retry on an error.
Added support for parsing structured type information in schema queries.
Bumped platformdirs from >=2.6.0,<4.0.0 to >=2.6.0,<5.0.0.
Updated diagnostics to use system$allowlist instead of system$whitelist.
Improved the cleanup logic so connections now rely on an interpreter shutdown instead of the __del__ method.
Updated the logging level from INFO to DEBUG when logging the executed query using SnowflakeCursor.execute.

Bumped the following dependencies:
- pandas from version >=1.0.0,<2.2.0 to >=1.0.0,<3.0.0
- cryptography from version <42.0.0,>=3.1.0 to >=3.1.0,<43.0.0
- pyOpenSSL from version >=16.2.0,<24.0.0 to >=16.2.0,<25.0.0
Bumped the keyring dependency lower bound to version 23.1.0 to address a security vulnerability.

Added support for Python 3.12.
Added a new Boolean force_return_table parameter to SnowflakeCursor.fetch_arrow_all to force returning pyarrow.Table in case of zero rows.
Cleanup some C++ code warnings and performance issues.
Made local testing more robust against implicit assumptions.
Added support for connecting using an existing connection via the session and master token.
Added support for connecting to Snowflake by authenticating with multiple SAML IDP using an external browser.
Improved configuration permissions warning message.