Skip to content

build(deps): bump net.snowflake:snowflake-jdbc from 3.28.0 to 4.0.1#3274

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1
Open

build(deps): bump net.snowflake:snowflake-jdbc from 3.28.0 to 4.0.1#3274
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 10, 2026 •
edited
Loading

Bumps net.snowflake:snowflake-jdbc from 3.28.0 to 4.0.1.

Release notes

Sourced from net.snowflake:snowflake-jdbc's releases.

v4.0.1

v4.0.0

Changelog

Sourced from net.snowflake:snowflake-jdbc's changelog.

For all official JDBC Release Notes please refer to https://docs.snowflake.com/en/release-notes/clients-drivers/jdbc

Changelog

  • Upcoming release (TBD)

  • v4.0.1

    • Add /etc/os-release data to Minicore telemetry
    • snowflakedb/snowflake-jdbc#2472
    • Fixed fat jar with S3 iteration, the problem of not finding class software.amazon.awssdk.transfer.s3.internal.ApplyUserAgentInterceptorsnowflakedb/snowflake-jdbc#2474
    • Removed Conscrypt from shading to prevent failed to find class org/conscrypt/CryptoUpcallssnowflakedb/snowflake-jdbc#2474
    • snowflakedb/snowflake-jdbc#2479
    • Fix external browser authentication after changing enum name. Manifested with Invalid connection URL: Invalid SSOUrl foundsnowflakedb/snowflake-jdbc#2475
    • Rolled back external browser authenticator name to externalbrowsersnowflakedb/snowflake-jdbc#2475

  • v4.0.0

    • Bumped netty to 4.1.130.Final to address CVE-2025-67735
    • snowflakedb/snowflake-jdbc#2449
    • snowflakedb/snowflake-jdbc#2457
    • snowflakedb/snowflake-jdbc#2460
    • snowflakedb/snowflake-jdbc#2385snowflakedb/snowflake-jdbc#2393)
    • snowflakedb/snowflake-jdbc#2418
    • snowflakedb/snowflake-jdbc#2417
    • snowflakedb/snowflake-jdbc#2452
    • Rename BouncyCastle JVM property from net.snowflake.jdbc.enableBouncyCastle to net.snowflake.jdbc.useBundledBouncyCastleForPrivateKeyDecryption.
    • Major public API restructuring: move all public APIs to net.snowflake.client.api.* package hierarchy:
      • Add new unified QueryStatus class in public API that replaces the deprecated QueryStatus enum and QueryStatusV2 class.
      • Add new public API interfaces for stream upload/download configuration (DownloadStreamConfig, UploadStreamConfig).
      • Add SnowflakeDatabaseMetaData interface to public API for database metadata operations.
      • Add SnowflakeAsyncResultSet interface to public API for async query operations.
      • Add SnowflakeResultSetSerializable interface to public API.
      • Deprecate net.snowflake.client.jdbc.SnowflakeDriver in favor of new net.snowflake.client.api.driver.SnowflakeDriver.
      • Move internal classes to net.snowflake.client.internal.* package hierarchy.
      • Removed deprecated com.snowflake.client.jdbc.SnowflakeDriver class.
      • Removed deprecated QueryStatus enum from net.snowflake.client.core package.
      • Removed deprecated QueryStatusV2 class from net.snowflake.client.jdbc package.
      • Removed deprecated SnowflakeType enum from net.snowflake.client.jdbc package.

  • v3.28.0

    • snowflakedb/snowflake-jdbc#2369
    • snowflakedb/snowflake-jdbc#2415
    • Fix Connection and socket timeout are now propagated to HTTP client.
    • Fix Azure 503 retries and configure it with the putGetMaxRetries parameter.
    • Improved retries for SSLHandshakeException errors caused by transient EOFException
    • Introduced shared library(source code) for extended telemetry to identify and prepare testing platform for native rust extensions
    • Bumped netty to 4.1.128.Final to address CVE-2025-59419

  • v3.27.1

    • Added platform detection on login to set PLATFORM metric in CLIENT_ENVIRONMENT
    • Disable DatabaseMetaDataLatestIT::testUseConnectionCtx test
    • Fix IT tests to construct OAuth scopes correctly

... (truncated)

Commits
  • f86bc1e SNOW-3027494 Add missing version tag to POMs (#2488)
  • e9b60b1 SNOW-3027494 JDBC v4.0.1 release version bump (#2484)
  • f7b7944 SNOW-2389788: Migrating docker images to artifactory (#2483)
  • 9534d4e SNOW-3046829 Fix external browser authenticator name (#2475)
  • f828ec6 SNOW-2381257: Update BouncyCastle dependency (#2479)
  • 6ace55c SNOW-3045441 Fix S3 SDK shading, add fat jar test app (#2474)
  • acf13ba SNOW-3042412 Fix S3 client encrypting with incorrect algorithm when 256 key i...
  • 07f969a Fix CLA (#2471)
  • 3a269f9 SNOW-3009274: Add etc/os-release data to CLIENT_ENV telemetry (#2470)
  • 4ec088c SNOW-3022696: Fix test assertion (#2467)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 10, 2026
@amazon-inspector-n-virginia
Copy link

amazon-inspector-n-virginia bot commented Feb 10, 2026

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

1 similar comment
@amazon-inspector-n-virginia
Copy link

amazon-inspector-n-virginia bot commented Feb 10, 2026

⏳ I'm reviewing this pull request for security vulnerabilities and code quality issues. I'll provide an update when I'm done

@dependabot dependabot bot mentioned this pull request Feb 10, 2026
Closed
@github-actions
Copy link
Contributor

github-actions bot commented Feb 10, 2026

I'm not approving this PR because it includes a major update of a dependency

@github-actions github-actions bot enabled auto-merge (squash) February 10, 2026 06:38
@github-actions github-actions bot added the requires-manual-qa Requires Manual Confirmation label Feb 10, 2026
@amazon-inspector-n-virginia
Copy link

amazon-inspector-n-virginia bot commented Feb 10, 2026

✅ I finished the code review, and didn't find any security or code quality issues.

1 similar comment
@amazon-inspector-n-virginia
Copy link

amazon-inspector-n-virginia bot commented Feb 10, 2026

✅ I finished the code review, and didn't find any security or code quality issues.

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 0515915 to 9b4a876 Compare February 11, 2026 20:18
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 9b4a876 to 09eaf35 Compare February 11, 2026 20:28
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 09eaf35 to 126f47a Compare February 11, 2026 20:36
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 126f47a to 9b371a9 Compare February 11, 2026 21:01
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 9b371a9 to 1134275 Compare February 11, 2026 21:26
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 1134275 to 80cde7c Compare February 11, 2026 21:56
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 80cde7c to 34b516f Compare February 11, 2026 22:06
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 34b516f to 402dce2 Compare February 11, 2026 22:26
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 402dce2 to cc7926d Compare February 11, 2026 22:35
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from cc7926d to bda2ce5 Compare February 11, 2026 22:43
@github-actions
Copy link
Contributor

github-actions bot commented Feb 11, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from bda2ce5 to a0edcdc Compare February 12, 2026 20:24
@github-actions
Copy link
Contributor

github-actions bot commented Feb 12, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from a0edcdc to 7410841 Compare February 12, 2026 21:05
@github-actions
Copy link
Contributor

github-actions bot commented Feb 12, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 7410841 to 52ffd55 Compare March 2, 2026 20:35
@github-actions
Copy link
Contributor

github-actions bot commented Mar 2, 2026

I'm not approving this PR because it includes a major update of a dependency

@dependabot
build(deps): bump net.snowflake:snowflake-jdbc from 3.28.0 to 4.0.1
c61d967 
Bumps [net.snowflake:snowflake-jdbc](https://github.com/snowflakedb/snowflake-jdbc) from 3.28.0 to 4.0.1.
- [Release notes](https://github.com/snowflakedb/snowflake-jdbc/releases)
- [Changelog](https://github.com/snowflakedb/snowflake-jdbc/blob/master/CHANGELOG.md)
- [Commits](snowflakedb/snowflake-jdbc@v3.28.0...v4.0.1)

---
updated-dependencies:
- dependency-name: net.snowflake:snowflake-jdbc
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/maven/net.snowflake-snowflake-jdbc-4.0.1 branch from 52ffd55 to c61d967 Compare March 10, 2026 17:51
@github-actions
Copy link
Contributor

github-actions bot commented Mar 10, 2026

I'm not approving this PR because it includes a major update of a dependency

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code requires-manual-qa Requires Manual Confirmation

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants