snowflake-cli 3.23.0__tar.gz → 3.24.0__tar.gz

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: snowflake-cli
-Version: 3.23.0
+Version: 3.24.0
 Summary: Snowflake CLI
 Project-URL: Source code, https://github.com/snowflakedb/snowflake-cli
 Project-URL: Bug Tracker, https://github.com/snowflakedb/snowflake-cli/issues
@@ -223,7 +223,7 @@ Classifier: Programming Language :: SQL
 Classifier: Topic :: Database
 Requires-Python: >=3.10
 Requires-Dist: click==8.1.8
-Requires-Dist: gitpython==3.1.50
+Requires-Dist: gitpython==3.1.57
 Requires-Dist: id==1.5.0
 Requires-Dist: jinja2==3.1.6
 Requires-Dist: packaging==25.0
@@ -232,6 +232,7 @@ Requires-Dist: pluggy==1.6.0
 Requires-Dist: prompt-toolkit==3.0.51
 Requires-Dist: protobuf<6,>=5.29.6
 Requires-Dist: pydantic==2.12.5
+Requires-Dist: python-dotenv==1.2.2
 Requires-Dist: pyyaml==6.0.2
 Requires-Dist: requests==2.33.0
 Requires-Dist: requirements-parser==0.13.0

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/RELEASE-NOTES.md

@@ -23,6 +23,35 @@
 ## Fixes and improvements
 
 
+# v3.24.0
+
+## Backward incompatibility
+* `snow app` commands for Snowflake App Runtime projects now always operate on `APPLICATION SERVICE` objects and no longer fall back to plain SPCS `SERVICE` objects. `snow app open --settings` always uses the `app-service` Snowsight URL segment, and `snow app teardown` always drops and verifies the app via `APPLICATION SERVICE`. Apps still deployed as legacy SPCS services are no longer supported by these commands.
+
+## Deprecations
+
+## New additions
+* Added optional `--validation-profile` to `snow spcs service remote-build` (e.g. `ML_JOB`, `NOTEBOOK`). The value is forwarded as `validation_profile` on `POST /api/v2/remote-build/execute` so the image builder can select a pre-baked validation ruleset. When omitted, no image validation is requested. Ignored for `--build-type app`.
+* Added `snow spcs service remote-build`, `remote-build-status`, and `remote-build-history` commands that submit and track SPCS image/app builds via the remote build REST API. These commands are hidden by default and gated by the `enable_spcs_remote_build` CLI feature flag.
+* `snow dcm plan` now supports the `--delta` flag for incremental deployments. This option enables processing only statements that have changed since the last deploy, plus statements potentially impacted by those changes.
+* `snow dcm` commands are now generally available (GA). DCM provides infrastructure-as-code capabilities for managing Snowflake objects through declarative SQL files. All DCM commands are now available without needing to enable the `enable_snowflake_projects` feature flag.
+* DCM projects: `snow dcm deploy`, `snow dcm plan`, `snow dcm preview`, and `snow dcm raw-analyze` now support environment variables and secrets declared in a project manifest's `templating.env_vars`/`templating.env_secrets` sections. Declared values are collected from the shell environment, or from a `.env` file passed via `--env-file`/`-e` (the shell always wins for a name declared in both), and forwarded to the server; `raw-analyze` previously had no support for this at all.
+* Added `snow helpers check-version`, which reports the installed Snowflake CLI version alongside the latest published version and whether an upgrade is available. Use `--refresh` to bypass the local cache and query PyPI/Homebrew directly. This is the on-demand equivalent of the automatic upgrade banner and always reports its result, even when `ignore_new_version_warning` is set.
+* Added `snow dbt copy`, which copies files between a local directory and a stage (or between stages) for a dbt project. It is an alias of `snow stage copy` and supports the same paths and options (`--recursive`, `--overwrite`, `--parallel`, `--auto-compress`, `--refresh`).
+* `snow app events` now surfaces app health telemetry for Snowflake App Runtime projects. `--type log|metric|lifecycle` selects the stream (default `log`); `--since` / `--until` accept relative shorthand (e.g. `30m`, `6h`, `2d`) or absolute UTC timestamps and switch logs to the historical event table, while `metric` and `lifecycle` are always historical and default to the last hour. `--metric cpu|memory|network` narrows metric output and `--raw` emits unconverted values (bytes, cores). The bare `snow app events` live log tail is unchanged.
+* `snow dcm deploy`, `snow dcm purge`, `snow dcm plan`, `snow dcm preview`, `snow dcm refresh`, and `snow dcm test` now show live, per-step progress as an interactive checklist instead of a single generic spinner.
+
+## Fixes and improvements
+* `snow dcm` commands now summarize the files being uploaded as a tree beneath the upload step, instead of listing every file on its own line.
+* Recursive stage uploads now upload directories concurrently instead of one at a time. This applies to every command that uploads a directory tree to a stage (e.g. `snow stage copy --recursive`, `snow dcm` deploy/plan/analyze, `snow dbt deploy`, `snow spcs service build-image`). Upload wall-clock is dominated by per-PUT round-trip latency, so trees with many nested folders (e.g. one file per directory) see a large speedup. Total upload concurrency is bounded by the `SNOWFLAKE_CLI_STAGE_UPLOAD_WORKERS` setting (config key `cli.stage_upload_workers`, default 16; set to 1 to restore the previous serial behavior). For `snow stage copy` this budget is shared with `--parallel` rather than multiplied by it, so existing invocations do not spawn more threads than before.
+* `snow dcm plan`, `deploy`, and `purge` now render each altered object's changes as an indented tree, showing added, modified, and removed columns, constraints, grants, and other properties — with previous → new values — instead of only the object name. Long or multi-line values are collapsed to a single line.
+* A bare `USER$` database resolved from the active connection is now expanded to the caller's personal database (`USER$<username>`) when the connection specifies a username, so commands validate and report against the fully-qualified name.
+* `snow app` commands (`validate`, `open`, `events`, `deploy`, `teardown`) now resolve their database and schema from the active connection like other CLI commands, so a bare `USER$` database configured in `snowflake.yml` is expanded to the caller's personal database.
+* `snow app setup` now defaults to a workspace for code storage on all databases (previously regular databases used a stage). When the role cannot create a workspace it uses a stage instead, and `snow app deploy` also falls back to a stage if a workspace cannot be used.
+* Upgraded `GitPython` from 3.1.50 to 3.1.57.
+* `snow dcm` commands run with `--save-output` now write artifacts directly into the `out/` directory, with each command's response in `out/<command>_result.json`, instead of nesting them under a per-command subdirectory. The `out/` directory is recreated empty at the start of every such run.
+
+
 # v3.23.0
 
 ## Deprecations

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/pylock.toml

@@ -268,9 +268,9 @@ wheels = [{ url = "https://files.pythonhosted.org/packages/a0/61/5c78b91c3143ed5
 
 [[packages]]
 name = "gitpython"
-version = "3.1.50"
-sdist = { url = "https://files.pythonhosted.org/packages/33/f6/354ae6491228b5eb40e10d89c4d13c651fe1cf7556e35ebdded50cff57ce/gitpython-3.1.50.tar.gz", upload-time = 2026-05-06T04:01:26Z, size = 219798, hashes = { sha256 = "80da2d12504d52e1f998772dc5baf6e553f8d2fcfe1fcc226c9d9a2ee3372dcc" } }
-wheels = [{ url = "https://files.pythonhosted.org/packages/20/7a/1c6e3562dfd8950adbb11ffbc65d21e7c89d01a6e4f137fa981056de25c5/gitpython-3.1.50-py3-none-any.whl", upload-time = 2026-05-06T04:01:23Z, size = 212507, hashes = { sha256 = "d352abe2908d07355014abdd21ddf798c2a961469239afec4962e9da884858f9" } }]
+version = "3.1.57"
+sdist = { url = "https://files.pythonhosted.org/packages/ba/0d/132ed135c871b6bf91adf16a0e43797cd535b81d4973b5d09291c54fc5ee/gitpython-3.1.57.tar.gz", upload-time = 2026-07-26T07:33:26Z, size = 225898, hashes = { sha256 = "c493ec57c0ef6b19743798b6a5af859c71814b524e7e6f97baa2f8e658961488" } }
+wheels = [{ url = "https://files.pythonhosted.org/packages/41/6e/2139de986d9c7c3ac86f1f8be43858ce90bdfe2f7175e6c80c650ba15242/gitpython-3.1.57-py3-none-any.whl", upload-time = 2026-07-26T07:33:24Z, size = 217151, hashes = { sha256 = "4ccf7d73c10f5c9e76043fbb2675ac5a1b3ff5b41e648f56bcbed5f63792ecaf" } }]
 
 [[packages]]
 name = "id"
@@ -603,6 +603,12 @@ version = "2.9.0.post0"
 sdist = { url = "https://files.pythonhosted.org/packages/66/c0/0c8b6ad9f17a802ee498c46e004a0eb49bc148f2fd230864601a86dcf6db/python-dateutil-2.9.0.post0.tar.gz", upload-time = 2024-03-01T18:36:20Z, size = 342432, hashes = { sha256 = "37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3" } }
 wheels = [{ url = "https://files.pythonhosted.org/packages/ec/57/56b9bcc3c9c6a792fcbaf139543cee77261f3651ca9da0c93f5c1221264b/python_dateutil-2.9.0.post0-py2.py3-none-any.whl", upload-time = 2024-03-01T18:36:18Z, size = 229892, hashes = { sha256 = "a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427" } }]
 
+[[packages]]
+name = "python-dotenv"
+version = "1.2.2"
+sdist = { url = "https://files.pythonhosted.org/packages/82/ed/0301aeeac3e5353ef3d94b6ec08bbcabd04a72018415dcb29e588514bba8/python_dotenv-1.2.2.tar.gz", upload-time = 2026-03-01T16:00:26Z, size = 50135, hashes = { sha256 = "2c371a91fbd7ba082c2c1dc1f8bf89ca22564a087c2c287cd9b662adde799cf3" } }
+wheels = [{ url = "https://files.pythonhosted.org/packages/0b/d7/1959b9648791274998a9c3526f6d0ec8fd2233e4d4acce81bbae76b44b2a/python_dotenv-1.2.2-py3-none-any.whl", upload-time = 2026-03-01T16:00:25Z, size = 22101, hashes = { sha256 = "1d8214789a24de455a8b8bd8ae6fe3c6b69a5e3d64aa8a8e5d68e694bbcb285a" } }]
+
 [[packages]]
 name = "pytz"
 version = "2025.2"

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/pyproject.toml

@@ -27,7 +27,7 @@ readme = "README.md"
 dependencies = [
   # Actual project dependencies, from which we generate [project.dependencies] section serving as a lockfile for PyPi
   "click==8.1.8",
-  "GitPython==3.1.50",
+  "GitPython==3.1.57",
   "PyYAML==6.0.2",
   "id==1.5.0",
   "jinja2==3.1.6",
@@ -37,6 +37,7 @@ dependencies = [
   "prompt-toolkit==3.0.51",
   "protobuf>=5.29.6,<6",
   "pydantic==2.12.5",
+  "python-dotenv==1.2.2",
   "requests==2.33.0",
   "requirements-parser==0.13.0",
   "rich==14.0.0",
@@ -104,26 +105,31 @@ packages = ["src/snowflake"]
 [tool.hatch.envs.default]
 python = "3.10"
 features = ["development"]
+# Use uv as the installer for faster environment creation (notably on CI
+# cache-miss). Scoped to the default (unit-test) env; the integration/e2e
+# envs still use pip because their `pip install` pre-install steps have not
+# been verified against uv's pip-less virtualenvs.
+installer = "uv"
 
 [tool.hatch.envs.default.scripts]
 # Unit tests are parallelized with pytest-xdist. `loaded_modules` runs serially
 # in a fresh process because it asserts on `sys.modules` after CLI startup,
 # which is meaningless under a long-lived xdist worker.
 test = [
-  "pytest -n auto --dist=worksteal tests/",
+  "pytest -n auto --dist=worksteal --durations=25 tests/",
   "pytest -m loaded_modules tests/",
 ]
 test-cov = [
-  "pytest --cov=snowflake.cli --cov-report= -n auto --dist=worksteal tests/",
+  "pytest --cov=snowflake.cli --cov-report= -n auto --dist=worksteal --durations=25 tests/",
   "pytest --cov=snowflake.cli --cov-append --cov-report= -m loaded_modules tests/",
   "coverage report",
 ]
 legacy-pypi-build = [".compat/build_snowflake-cli-labs.sh"]
 lock-dependencies = [
-  "uv pip compile pyproject.toml -o pylock.toml -p 3.10 --no-annotate --universal",
+  "uv pip compile pyproject.toml -o pylock.toml -p 3.10 --no-annotate --universal --index https://pypi.org/simple",
 ]
 sync-dependencies = [
-  "uv pip compile pyproject.toml -o snyk/requirements.txt -p 3.10 --no-annotate --universal",
+  "uv pip compile pyproject.toml -o snyk/requirements.txt -p 3.10 --no-annotate --universal --index https://pypi.org/simple",
 ]
 
 [tool.hatch.envs.packaging]
@@ -194,7 +200,7 @@ check = [
   'ls .hatch/ud/lib/python3.12/site-packages/snowflake',
   'pip install "git+https://github.com/snowflakedb/universal-driver@{env:UD_BRANCH:main}#subdirectory=python"',
   "python -c \"from packaging.version import Version; import snowflake.connector; v = Version(snowflake.connector.__version__); assert v.major >= 5, 'Expected snowflake-connector-python >= 5, got ' + str(v)\"",
-  'pytest -m "integration and not qa_only" -n8 --maxfail=1000 --dist=worksteal --ignore=tests_integration/tests_using_container_services --ignore=tests_integration/nativeapp tests_integration/ {args}'
+  'pytest -m "integration and not qa_only and not no_ud" -n8 --maxfail=1000 --dist=worksteal --ignore=tests_integration/tests_using_container_services --ignore=tests_integration/nativeapp tests_integration/ {args}'
 ]
 
 
@@ -235,6 +241,7 @@ markers = [
   "integration_experimental: experimental integration test",
   "no_qa: mark test as not to be run in QA",
   "qa_only: mark test as to be run only in QA",
+  "no_ud: mark test as incompatible with the Universal Driver",
 ]
 
 

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/snyk/requirements.txt

@@ -14,7 +14,7 @@ colorama==0.4.6 ; sys_platform == 'win32'
 cryptography==46.0.6
 filelock==3.18.0
 gitdb==4.0.12
-gitpython==3.1.50
+gitpython==3.1.57
 id==1.5.0
 idna==3.10
 importlib-metadata==8.7.0 ; python_full_version < '3.12'
@@ -42,6 +42,7 @@ pygments==2.19.2
 pyjwt==2.10.1
 pyopenssl==26.0.0
 python-dateutil==2.9.0.post0
+python-dotenv==1.2.2
 pytz==2025.2
 pywin32-ctypes==0.2.3 ; sys_platform == 'win32'
 pyyaml==6.0.2

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/src/snowflake/cli/__about__.py

@@ -19,7 +19,7 @@ import re
 import subprocess
 from enum import Enum, unique
 
-VERSION = "3.23.0"
+VERSION = "3.24.0"
 
 
 def get_display_version() -> str:

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/src/snowflake/cli/_app/cli_app.py

@@ -38,6 +38,7 @@ from snowflake.cli._app.main_typer import SnowCliMainTyper
 from snowflake.cli._app.printing import MessageResult, print_result
 from snowflake.cli._app.version_check import (
     get_new_version_msg,
+    reset_new_version_banner_suppression,
     show_new_version_banner_callback,
 )
 from snowflake.cli.api.config import (
@@ -183,6 +184,7 @@ class CliAppFactory:
             return self._app
 
         app = SnowCliMainTyper()
+        reset_new_version_banner_suppression()
         new_version_msg = get_new_version_msg()
 
         @app.callback(

{snowflake_cli-3.23.0 → snowflake_cli-3.24.0}/src/snowflake/cli/_app/version_check.py

@@ -1,5 +1,7 @@
 import json
+import logging
 import time
+from dataclasses import dataclass
 from warnings import warn
 
 import requests
@@ -14,9 +16,15 @@ from snowflake.cli.api.config import (
 )
 from snowflake.cli.api.secure_path import SecurePath
 
+log = logging.getLogger(__name__)
+
 REPOSITORY_URL_PIP = "https://pypi.org/pypi/snowflake-cli/json"
 REPOSITORY_URL_BREW = "https://formulae.brew.sh/api/formula/snowflake-cli.json"
 
+# Set by an explicit version-reporting command (e.g. `snow helpers check-version`)
+# so the passive upgrade banner does not duplicate the command's own output.
+_suppress_new_version_banner = False
+
 # How often to refresh the version cache (seconds)
 VERSION_CACHE_REFRESH_INTERVAL = 60 * 60  # 1 hour
 # How often to show the new version message (seconds)
@@ -57,9 +65,49 @@ def get_new_version_msg() -> str | None:
     return None
 
 
+@dataclass
+class CliVersionInfo:
+    current_version: str
+    latest_version: str | None
+    update_available: bool
+
+
+def get_version_info(*, force_refresh: bool = False) -> CliVersionInfo:
+    """Resolve the current and latest available Snowflake CLI versions.
+
+    Unlike the passive upgrade banner, this always reports the result: it
+    ignores the ``ignore_new_version_warning`` config and the "shown recently"
+    throttle so an explicit check is never silenced. ``force_refresh`` bypasses
+    the on-disk cache and queries the package repositories directly.
+    """
+    latest_version = _VersionCache().get_last_version(force_refresh=force_refresh)
+    update_available = bool(latest_version and latest_version > Version(VERSION))
+    return CliVersionInfo(
+        current_version=VERSION,
+        latest_version=str(latest_version) if latest_version else None,
+        update_available=update_available,
+    )
+
+
+def reset_new_version_banner_suppression() -> None:
+    """Reset banner suppression; call once per app build."""
+    global _suppress_new_version_banner
+    _suppress_new_version_banner = False
+
+
+def suppress_new_version_banner() -> None:
+    """Mute the passive upgrade banner for the current invocation.
+
+    Used by commands that already report version status themselves so the
+    banner does not duplicate their output.
+    """
+    global _suppress_new_version_banner
+    _suppress_new_version_banner = True
+
+
 def show_new_version_banner_callback(msg):
     def _callback(*args, **kwargs):
-        if msg and not get_cli_context().silent:
+        if msg and not _suppress_new_version_banner and not get_cli_context().silent:
             warn(msg)
 
     return _callback
@@ -130,18 +178,22 @@ class _VersionCache:
         self._save_latest_version(version)
         return Version(version)
 
-    def _read_latest_version(self) -> Version | None:
-        if self._cache_file.exists():
+    def _read_latest_version(self, force_refresh: bool = False) -> Version | None:
+        if not force_refresh and self._cache_file.exists():
             data = json.loads(self._cache_file.read_text(file_size_limit_mb=1))
             now = time.time()
             if data[_VersionCache._last_time] > now - VERSION_CACHE_REFRESH_INTERVAL:
                 return Version(data[_VersionCache._version])
         return self._update_latest_version()
 
-    def get_last_version(self) -> Version | None:
+    def get_last_version(self, force_refresh: bool = False) -> Version | None:
         try:
-            return self._read_latest_version()
-        except:  # anything, this it not crucial feature
+            return self._read_latest_version(force_refresh=force_refresh)
+        except Exception:  # anything, this is not a crucial feature
+            # Swallowed so a version check never breaks a command, but logged
+            # so --debug/--verbose can reveal the real cause (network error,
+            # HTTP 5xx, malformed JSON, ...) instead of only a generic message.
+            log.debug("Failed to determine the latest CLI version", exc_info=True)
             return None
 
     def get_last_time_shown(self) -> float | int | None: