Release Notes September 2026
Orchestrators
Improvement Security Vulnerability Remediation
Updated dependencies across DataOps orchestrators to remediate Critical, High, and Medium security vulnerabilities identified by Black Duck.
The following dependencies have been updated to patched versions where they are directly pinned in orchestrator Dockerfiles or pyproject.toml files:
setuptoolsrequestspytesturllib3WerkzeugcryptographypyOpenSSL
The snowflake-connector-python dependency has also been updated to >=4.4.0 in orchestrators where it is used together with pyOpenSSL. This enables the use of the patched pyOpenSSL 26.4.0 version in the affected images where the dependency is not restricted by the dbt-snowflake connector requirement.
Additional dependency requirements were introduced where necessary to address transitive security vulnerabilities and maintain compatibility:
- Added an explicit
pyasn1>=0.6.4requirement to the AWS and Dataprep orchestrators. - Added an explicit
protobufversion floor to the Snowpark Python orchestrator, while maintaining the upper limit required bysnowflake-snowpark-python==1.44.0. - Updated
requestsused by the.gitlab-ci/bootstrap.ymlpipeline job.
The security updates apply across the relevant DataOps orchestrators, including Base, Python, AWS, Dataprep, Utils, Reporting, Stage Ingestion, Snowpark Python, Snowflake Object Lifecycle, Collibra, VaultSpeed, Orchestration, Transform, Coalesce, dbt Cloud, and Informatica CDGC orchestrators.
dbt-core and dbt-snowflake were intentionally not upgraded as part of this release because doing so would require a major-version upgrade and is outside the scope of this security update. Where these dependencies prevent upgrading related packages, the relevant compatibility constraints have been documented.
Bug Fix SOLE Hooks Compatibility with Snow CLI
Fixed an issue where Snow CLI commands executed from SOLE hooks could fail due to transaction handling.
The SOLE hook implementation has been updated so that Snow CLI operations can execute correctly without encountering the previous transaction-related failure.
Bug Fix Improved SOLE Grant Management Multiprocessing
Updated SOLE Grant Management to use Python's get_context('spawn').Pool instead of the default multiprocessing.Pool.
This change improves the reliability of parallel grant-management operations and provides a more controlled multiprocessing context when SOLE processes grants concurrently.
Bug Fix SOLE Grant Management Compatibility with Snowflake Behavior Bundle 2026_06
Updated SOLE Grant Management to accommodate changes introduced by Snowflake Behavior Bundle 2026_06.
Snowflake changed the grantee_name output returned by SHOW GRANTS. SOLE Grant Management has been updated to correctly handle the new output format, preventing grant-management operations from being affected by the change in Snowflake behavior.
Bug Fix Hybrid Table Column Management
Fixed multiple issues affecting the management of Snowflake hybrid table columns through SOLE.
The fixes include:
- Fixed crashes that could occur when updating hybrid table columns.
- Fixed incorrect detection of newly added columns.
- Fixed handling of default constants that were not correctly escaped.
- Improved hybrid table change detection to prevent incorrect resource changes during Terraform plan and apply operations.
These changes improve the reliability of hybrid table updates and help prevent unnecessary or incorrect changes when managing hybrid tables through SOLE.