Snowflake Connector for Python release notes for 2026¶

This article contains the release notes for the Snowflake Connector for Python, including the following when applicable:

Snowflake uses semantic versioning for Snowflake Connector for Python updates.

Version 4.4.0 (Mar 25, 2026)¶

Bumped the lower boundary of the cryptography package to 46.0.5 to address CVE-2026-26007.
Added support for Python 3.14.
Removed the upper bound dependency constraint on pyOpenSSL to allow installation of pyOpenSSL 26.0.0+, which includes a fix for GHSA-vp96-hxj8-p424.

Renamed the environment variable for skipping config file permission warnings from SF_SKIP_WARNING_FOR_READ_PERMISSIONS_ON_CONFIG_FILE to SF_SKIP_TOKEN_FILE_PERMISSIONS_VERIFICATION. The old variable is still supported but emits a deprecation warning.

Fixed the Azure IMDS Metadata header to use lowercase "true" instead of "True", which caused 400 errors during Azure Workload Identity Federation authentication.
Fixed the default crl_download_max_size to be 20MB instead of 200MB to prevent potential out-of-memory issues.
Fixed a bug where Azure GET commands would incorrectly set the file status to UPLOADED instead of preserving the DOWNLOADED status during metadata retrieval.
Fixed the unsafe_skip_file_permissions_check flag not being respected when reading connections.toml.
Fixed a JSONDecodeError in result_batch._load() when fetching large result sets.

Deprecated support for custom revocation error classes in OCSP response cache deserialization.

By default, only RevocationCheckError exceptions are deserialized from OCSP cache. Custom exception classes can be temporarily enabled by setting the SNOWFLAKE_ENABLE_CUSTOM_REVOCATION_ERRORS environment variable to true or 1, but this support will be removed in a future release.

Bumped vendored urllib3 to version 2.6.3.
Added force_microseconds_precision to cursor.fetch_arrow_all and cursor.fetch_pandas_all to avoid PyArrow schema inconsistencies between batches.
Added a warning when using HTTP protocol for OAuth URLs.
Updated the server_session_keep_alive parameter in SnowflakeConnection to skip checking for pending asyncronous queries, providing faster connection close times, especially when many asyncronous queries are executed.

Fixed the string representation of INTERVAL YEAR and INTERVAL MONTH types.
Ensured proper list conversions; the converter now runs to_snowflake on all list items.

Added the SnowflakeCursor.stats property to expose granular DML statistics (rows inserted, deleted, updated, and duplicates) for operations like CTAS where rowcount is insufficient.
Added support for injecting Snowpark Container Services (SPCS) service identifier tokens (SPCS_TOKEN) into login requests when present in SPCS containers.
Introduced a shared library for extended telemetry to identify and prepare testing platforms for native Rust extensions.