Skip to content

Pin pyopenssl and snowflake-connector-python versions#1154

Merged
alena-hutchinson merged 3 commits intomainfrom
pin-pyopenssl-version
Apr 13, 2026
Merged

Pin pyopenssl and snowflake-connector-python versions#1154
alena-hutchinson merged 3 commits intomainfrom
pin-pyopenssl-version

Conversation

@alena-hutchinson
Copy link
Copy Markdown
Contributor

@alena-hutchinson alena-hutchinson commented Apr 10, 2026

Upgrade snowflake-connector-python to ≥ 4.4 and require pyopenssl ≥ 26. Older Snowflake connectors capped pyOpenSSL < 26, which blocked fixes for CVE-2026-27459 and CVE-2026-27448; 4.4+ removes that cap, and the explicit pyopenssl floor ensures we always ship a patched version. Vanta vulnerability here.

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 10, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 89.05%. Comparing base (49707a0) to head (584f6f1).
⚠️ Report is 1 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1154      +/-   ##
==========================================
- Coverage   89.19%   89.05%   -0.14%     
==========================================
  Files          56       56              
  Lines        2896     2896              
==========================================
- Hits         2583     2579       -4     
- Misses        313      317       +4     
Flag Coverage Δ
3.11 78.07% <ø> (ø)
e2e 60.32% <ø> (-0.35%) ⬇️
integration 65.40% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@alena-hutchinson alena-hutchinson marked this pull request as ready for review April 10, 2026 20:51
@alena-hutchinson alena-hutchinson merged commit 6059484 into main Apr 13, 2026
16 checks passed
@alena-hutchinson alena-hutchinson deleted the pin-pyopenssl-version branch April 13, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants