Skip to content

chore(deps): bump snowflake-sdk from 3.2.0 to 3.3.0 - #4899

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/snowflake-sdk-3.3.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/snowflake-sdk-3.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps snowflake-sdk from 3.2.0 to 3.3.0.

Release notes

Sourced from snowflake-sdk's releases.

Release

Changelog

Sourced from snowflake-sdk's changelog.

3.3.0

Changes:

  • snowflakedb/snowflake-connector-nodejs#1471
  • Restricted the WORKLOAD_IDENTITY authenticator to recognized Snowflake hosts (*.snowflakecomputing.com/.cn/.mil). Use SNOWFLAKE_WIF_ALLOWED_HOST_SUFFIXESsnowflakedb/snowflake-connector-nodejs#1472

Bugfixes:

  • snowflakedb/snowflake-connector-nodejs#1473
Commits
  • 9a0bc71 3.3.0 release (#1474)
  • 224f0fa SNOW-3649870 CSP response validation improvements (#1473)
  • 070d9fe Restrict WORKLOAD_IDENTITY to recognized Snowflake hosts (#1472)
  • f96cd15 Logging hardening: correct SAS masking + extend cloud-URL query-param masking...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 9, 2026
@cursor

cursor Bot commented Oct 9, 2026 •

Copy link
Copy Markdown

PR Summary

Medium Risk
Upgrades the Snowflake Node driver used by @crowd/snowflake and Sequelize’s optional integration; behavior changes are limited to the connector but could affect auth and connection handling in production.

Overview
Bumps snowflake-sdk in @crowd/snowflake from ^3.1.0 to ^3.3.0, with pnpm-lock.yaml updated so the resolved driver is 3.3.0 (including Sequelize’s optional Snowflake peer) and transitive AWS/Smithy packages align with the new driver tree.

There are no application source changes—only dependency metadata and the lockfile. The 3.3.0 driver release tightens WORKLOAD_IDENTITY to recognized Snowflake host suffixes, improves CSP response validation, and hardens logging/masking per upstream release notes.

Reviewed by Cursor Bugbot for commit 4ad4a8b. Bugbot is set up for automated code reviews on this repo. Configure here.

@github-actions

github-actions Bot commented Oct 9, 2026

Copy link
Copy Markdown
Contributor

⚠️ Jira Issue Key Missing

Your PR title doesn't contain a Jira issue key. Consider adding it for better traceability.

Example:

  • feat: add user authentication (CM-123)
  • feat: add user authentication (IN-123)

Projects:

  • CM: Community Data Platform
  • IN: Insights

Please add a Jira issue key to your PR title.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/snowflake-sdk-3.3.0 branch from 1dda2c7 to 4ad4a8b Compare October 9, 2026 08:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant