snowflake-connector-python 3.13.2__tar.gz → 3.14.0__tar.gz

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/DESCRIPTION.md

@@ -7,6 +7,17 @@ https://docs.snowflake.com/
 Source code is also available at: https://github.com/snowflakedb/snowflake-connector-python
 
 # Release Notes
+- v3.14.0(March 03, 2025)
+  - Bumped pyOpenSSL dependency upper boundary from <25.0.0 to <26.0.0.
+  - Added a <19.0.0 pin to pyarrow as a workaround to a bug affecting Azure Batch.
+  - Optimized distribution package lookup to speed up import.
+  - Fixed a bug where privatelink OCSP Cache url could not be determined if privatelink account name was specified in uppercase.
+  - Added support for iceberg tables to `write_pandas`.
+  - Fixed base64 encoded private key tests.
+  - Fixed a bug where file permission check happened on Windows.
+  - Added support for File types.
+  - Added `unsafe_file_write` connection parameter that restores the previous behaviour of saving files downloaded with GET with 644 permissions.
+
 - v3.13.2(January 29, 2025)
   - Changed not to use scoped temporary objects.
 

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/MANIFEST.in

@@ -19,6 +19,7 @@ exclude license_header.txt
 exclude tox.ini
 exclude mypy.ini
 exclude .clang-format
+exclude .wiremock/*
 
 prune ci
 prune benchmark

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.2
 Name: snowflake-connector-python
-Version: 3.13.2
+Version: 3.14.0
 Summary: Snowflake Connector for Python
 Home-page: https://www.snowflake.com/
 Author: Snowflake, Inc
@@ -41,7 +41,7 @@ License-File: NOTICE
 Requires-Dist: asn1crypto<2.0.0,>0.24.0
 Requires-Dist: cffi<2.0.0,>=1.9
 Requires-Dist: cryptography>=3.1.0
-Requires-Dist: pyOpenSSL<25.0.0,>=22.0.0
+Requires-Dist: pyOpenSSL<26.0.0,>=22.0.0
 Requires-Dist: pyjwt<3.0.0
 Requires-Dist: pytz
 Requires-Dist: requests<3.0.0
@@ -71,7 +71,7 @@ Requires-Dist: pytest-xdist; extra == "development"
 Requires-Dist: pytzdata; extra == "development"
 Provides-Extra: pandas
 Requires-Dist: pandas<3.0.0,>=1.0.0; extra == "pandas"
-Requires-Dist: pyarrow; extra == "pandas"
+Requires-Dist: pyarrow<19.0.0; extra == "pandas"
 Provides-Extra: secure-local-storage
 Requires-Dist: keyring<26.0.0,>=23.1.0; extra == "secure-local-storage"
 
@@ -84,6 +84,17 @@ https://docs.snowflake.com/
 Source code is also available at: https://github.com/snowflakedb/snowflake-connector-python
 
 # Release Notes
+- v3.14.0(March 03, 2025)
+  - Bumped pyOpenSSL dependency upper boundary from <25.0.0 to <26.0.0.
+  - Added a <19.0.0 pin to pyarrow as a workaround to a bug affecting Azure Batch.
+  - Optimized distribution package lookup to speed up import.
+  - Fixed a bug where privatelink OCSP Cache url could not be determined if privatelink account name was specified in uppercase.
+  - Added support for iceberg tables to `write_pandas`.
+  - Fixed base64 encoded private key tests.
+  - Fixed a bug where file permission check happened on Windows.
+  - Added support for File types.
+  - Added `unsafe_file_write` connection parameter that restores the previous behaviour of saving files downloaded with GET with 644 permissions.
+
 - v3.13.2(January 29, 2025)
   - Changed not to use scoped temporary objects.
 

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/setup.cfg

@@ -46,7 +46,7 @@ install_requires =
 	asn1crypto>0.24.0,<2.0.0
 	cffi>=1.9,<2.0.0
 	cryptography>=3.1.0
-	pyOpenSSL>=22.0.0,<25.0.0
+	pyOpenSSL>=22.0.0,<26.0.0
 	pyjwt<3.0.0
 	pytz
 	requests<3.0.0
@@ -93,7 +93,7 @@ development =
 	pytzdata
 pandas = 
 	pandas>=1.0.0,<3.0.0
-	pyarrow
+	pyarrow<19.0.0
 secure-local-storage = 
 	keyring>=23.1.0,<26.0.0
 

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/auth/__init__.py

@@ -9,6 +9,7 @@ from .by_plugin import AuthByPlugin, AuthType
 from .default import AuthByDefault
 from .idtoken import AuthByIdToken
 from .keypair import AuthByKeyPair
+from .no_auth import AuthNoAuth
 from .oauth import AuthByOAuth
 from .okta import AuthByOkta
 from .pat import AuthByPAT
@@ -25,6 +26,7 @@ FIRST_PARTY_AUTHENTICATORS = frozenset(
         AuthByWebBrowser,
         AuthByIdToken,
         AuthByPAT,
+        AuthNoAuth,
     )
 )
 
@@ -37,6 +39,7 @@ __all__ = [
     "AuthByOkta",
     "AuthByUsrPwdMfa",
     "AuthByWebBrowser",
+    "AuthNoAuth",
     "Auth",
     "AuthType",
     "FIRST_PARTY_AUTHENTICATORS",

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/auth/_auth.py

@@ -63,6 +63,7 @@ from ..network import (
 from ..options import installed_keyring, keyring
 from ..sqlstate import SQLSTATE_CONNECTION_WAS_NOT_ESTABLISHED
 from ..version import VERSION
+from .no_auth import AuthNoAuth
 
 if TYPE_CHECKING:
     from . import AuthByPlugin
@@ -186,6 +187,10 @@ class Auth:
     ) -> dict[str, str | int | bool]:
         logger.debug("authenticate")
 
+        # For no-auth connection, authentication is no-op, and we can return early here.
+        if isinstance(auth_instance, AuthNoAuth):
+            return {}
+
         if timeout is None:
             timeout = auth_instance.timeout
 

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/auth/by_plugin.py

@@ -55,6 +55,7 @@ class AuthType(Enum):
     USR_PWD_MFA = "USERNAME_PASSWORD_MFA"
     OKTA = "OKTA"
     PAT = "PROGRAMMATIC_ACCESS_TOKEN'"
+    NO_AUTH = "NO_AUTH"
 
 
 class AuthByPlugin(ABC):

snowflake_connector_python-3.14.0/src/snowflake/connector/auth/no_auth.py

@@ -0,0 +1,43 @@
+#!/usr/bin/env python
+#
+# Copyright (c) 2012-2023 Snowflake Computing Inc. All rights reserved.
+#
+
+from __future__ import annotations
+
+from typing import Any
+
+from .by_plugin import AuthByPlugin, AuthType
+
+
+class AuthNoAuth(AuthByPlugin):
+    """No-auth Authentication.
+
+    It is a dummy auth that requires no extra connection establishment.
+    """
+
+    @property
+    def type_(self) -> AuthType:
+        return AuthType.NO_AUTH
+
+    @property
+    def assertion_content(self) -> str | None:
+        return None
+
+    def __init__(self) -> None:
+        super().__init__()
+
+    def reset_secrets(self) -> None:
+        pass
+
+    def prepare(
+        self,
+        **kwargs: Any,
+    ) -> None:
+        pass
+
+    def reauthenticate(self, **kwargs: Any) -> dict[str, bool]:
+        return {"success": True}
+
+    def update_body(self, body: dict[Any, Any]) -> None:
+        pass

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/azure_storage_client.py

@@ -65,8 +65,15 @@ class SnowflakeAzureRestClient(SnowflakeStorageClient):
         chunk_size: int,
         stage_info: dict[str, Any],
         use_s3_regional_url: bool = False,
+        unsafe_file_write: bool = False,
     ) -> None:
-        super().__init__(meta, stage_info, chunk_size, credentials=credentials)
+        super().__init__(
+            meta,
+            stage_info,
+            chunk_size,
+            credentials=credentials,
+            unsafe_file_write=unsafe_file_write,
+        )
         end_point: str = stage_info["endPoint"]
         if end_point.startswith("blob."):
             end_point = end_point[len("blob.") :]

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/config_manager.py

@@ -330,7 +330,8 @@ class ConfigManager:
                 continue
 
             if (
-                sliceoptions.check_permissions  # Skip checking if this file couldn't hold sensitive information
+                not IS_WINDOWS  # Skip checking on Windows
+                and sliceoptions.check_permissions  # Skip checking if this file couldn't hold sensitive information
                 # Same check as openssh does for permissions
                 # https://github.com/openssh/openssh-portable/blob/2709809fd616a0991dc18e3a58dea10fb383c3f0/readconf.c#LL2264C1-L2264C1
                 and filep.stat().st_mode & READABLE_BY_OTHERS != 0
@@ -341,12 +342,7 @@ class ConfigManager:
                     and filep.stat().st_uid != os.getuid()
                 )
             ):
-                # for non-Windows, suggest change to 0600 permissions.
-                chmod_message = (
-                    f'.\n * To change owner, run `chown $USER "{str(filep)}"`.\n * To restrict permissions, run `chmod 0600 "{str(filep)}"`.\n'
-                    if not IS_WINDOWS
-                    else ""
-                )
+                chmod_message = f'.\n * To change owner, run `chown $USER "{str(filep)}"`.\n * To restrict permissions, run `chmod 0600 "{str(filep)}"`.\n'
 
                 warn(f"Bad owner or permissions on {str(filep)}{chmod_message}")
             LOGGER.debug(f"reading configuration file from {str(filep)}")

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/connection.py

@@ -23,7 +23,6 @@ from functools import partial
 from io import StringIO
 from logging import getLogger
 from threading import Lock
-from time import strptime
 from types import TracebackType
 from typing import Any, Callable, Generator, Iterable, Iterator, NamedTuple, Sequence
 from uuid import UUID
@@ -45,6 +44,7 @@ from .auth import (
     AuthByPlugin,
     AuthByUsrPwdMfa,
     AuthByWebBrowser,
+    AuthNoAuth,
 )
 from .auth.idtoken import AuthByIdToken
 from .backoff_policies import exponential_backoff
@@ -99,6 +99,7 @@ from .network import (
     DEFAULT_AUTHENTICATOR,
     EXTERNAL_BROWSER_AUTHENTICATOR,
     KEY_PAIR_AUTHENTICATOR,
+    NO_AUTH_AUTHENTICATOR,
     OAUTH_AUTHENTICATOR,
     PROGRAMMATIC_ACCESS_TOKEN,
     REQUEST_ID,
@@ -312,9 +313,6 @@ APPLICATION_RE = re.compile(r"[\w\d_]+")
 for m in [method for method in dir(errors) if callable(getattr(errors, method))]:
     setattr(sys.modules[__name__], m, getattr(errors, m))
 
-# Workaround for https://bugs.python.org/issue7980
-strptime("20150102030405", "%Y%m%d%H%M%S")
-
 logger = getLogger(__name__)
 
 
@@ -383,6 +381,7 @@ class SnowflakeConnection:
         server_session_keep_alive: When true, the connector does not destroy the session on the Snowflake server side
           before the connector shuts down. Default value is false.
         token_file_path: The file path of the token file. If both token and token_file_path are provided, the token in token_file_path will be used.
+        unsafe_file_write: When true, files downloaded by GET will be saved with 644 permissions. Otherwise, files will be saved with safe - owner-only permissions: 600.
     """
 
     OCSP_ENV_LOCK = Lock()
@@ -740,6 +739,14 @@ class SnowflakeConnection:
     def iobound_tpe_limit(self) -> int | None:
         return self._iobound_tpe_limit
 
+    @property
+    def unsafe_file_write(self) -> bool:
+        return self._unsafe_file_write
+
+    @unsafe_file_write.setter
+    def unsafe_file_write(self, value: bool) -> None:
+        self._unsafe_file_write = value
+
     def connect(self, **kwargs) -> None:
         """Establishes connection to Snowflake."""
         logger.debug("connect")
@@ -930,6 +937,7 @@ class SnowflakeConnection:
 
     @staticmethod
     def setup_ocsp_privatelink(app, hostname) -> None:
+        hostname = hostname.lower()
         SnowflakeConnection.OCSP_ENV_LOCK.acquire()
         ocsp_cache_server = f"http://ocsp.{hostname}/ocsp_response_cache.json"
         os.environ["SF_OCSP_RESPONSE_CACHE_SERVER_URL"] = ocsp_cache_server
@@ -961,7 +969,7 @@ class SnowflakeConnection:
                 os.environ["SF_OCSP_RESPONSE_CACHE_SERVER_URL"],
             )
 
-        if ".privatelink.snowflakecomputing." in self.host:
+        if ".privatelink.snowflakecomputing." in self.host.lower():
             SnowflakeConnection.setup_ocsp_privatelink(self.application, self.host)
         else:
             if "SF_OCSP_RESPONSE_CACHE_SERVER_URL" in os.environ:
@@ -1210,6 +1218,11 @@ class SnowflakeConnection:
             if "protocol" not in kwargs:
                 self._protocol = "https"
 
+        if "unsafe_file_write" in kwargs:
+            self._unsafe_file_write = kwargs["unsafe_file_write"]
+        else:
+            self._unsafe_file_write = False
+
         logger.info(
             f"Connecting to {_DOMAIN_NAME_MAP.get(extract_top_level_domain_from_hostname(self._host), 'GLOBAL')} Snowflake domain"
         )
@@ -1237,9 +1250,15 @@ class SnowflakeConnection:
             with open(token_file_path) as f:
                 self._token = f.read()
 
+        # Set of authenticators allowing empty user.
+        empty_user_allowed_authenticators = {OAUTH_AUTHENTICATOR, NO_AUTH_AUTHENTICATOR}
+
         if not (self._master_token and self._session_token):
-            if not self.user and self._authenticator != OAUTH_AUTHENTICATOR:
-                # OAuth Authentication does not require a username
+            if (
+                not self.user
+                and self._authenticator not in empty_user_allowed_authenticators
+            ):
+                # OAuth and NoAuth Authentications does not require a username
                 Error.errorhandler_wrapper(
                     self,
                     None,
@@ -1268,14 +1287,15 @@ class SnowflakeConnection:
                     {"msg": "Password is empty", "errno": ER_NO_PASSWORD},
                 )
 
-        if not self._account:
+        # Only AuthNoAuth allows account to be omitted.
+        if not self._account and not isinstance(self.auth_class, AuthNoAuth):
             Error.errorhandler_wrapper(
                 self,
                 None,
                 ProgrammingError,
                 {"msg": "Account must be specified", "errno": ER_NO_ACCOUNT_NAME},
             )
-        if "." in self._account:
+        if self._account and "." in self._account:
             self._account = parse_account(self._account)
 
         if not isinstance(self._backoff_policy, Callable) or not isinstance(

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/constants.py

@@ -182,6 +182,9 @@ FIELD_TYPES: tuple[FieldType, ...] = (
     ),
     FieldType(name="VECTOR", dbapi_type=[DBAPI_TYPE_BINARY], pa_type=vector_pa_type),
     FieldType(name="MAP", dbapi_type=[DBAPI_TYPE_BINARY], pa_type=map_pa_type),
+    FieldType(
+        name="FILE", dbapi_type=[DBAPI_TYPE_STRING], pa_type=lambda _: pa.string()
+    ),
 )
 
 FIELD_NAME_TO_ID: DefaultDict[Any, int] = defaultdict(int)

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/cursor.py

@@ -1060,6 +1060,7 @@ class SnowflakeCursor:
                     multipart_threshold=data.get("threshold"),
                     use_s3_regional_url=self._connection.enable_stage_s3_privatelink_for_us_east_1,
                     iobound_tpe_limit=self._connection.iobound_tpe_limit,
+                    unsafe_file_write=self._connection.unsafe_file_write,
                 )
                 sf_file_transfer_agent.execute()
                 data = sf_file_transfer_agent.result()

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/encryption_util.py

@@ -195,6 +195,7 @@ class SnowflakeEncryptionUtil:
         in_filename: str,
         chunk_size: int = 64 * kilobyte,
         tmp_dir: str | None = None,
+        unsafe_file_write: bool = False,
     ) -> str:
         """Decrypts a file and stores the output in the temporary directory.
 
@@ -213,8 +214,10 @@ class SnowflakeEncryptionUtil:
             temp_output_file = os.path.join(tmp_dir, temp_output_file)
 
         logger.debug("encrypted file: %s, tmp file: %s", in_filename, temp_output_file)
+
+        file_opener = None if unsafe_file_write else owner_rw_opener
         with open(in_filename, "rb") as infile:
-            with open(temp_output_file, "wb", opener=owner_rw_opener) as outfile:
+            with open(temp_output_file, "wb", opener=file_opener) as outfile:
                 SnowflakeEncryptionUtil.decrypt_stream(
                     metadata, encryption_material, infile, outfile, chunk_size
                 )

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/file_transfer_agent.py

@@ -355,6 +355,7 @@ class SnowflakeFileTransferAgent:
         source_from_stream: IO[bytes] | None = None,
         use_s3_regional_url: bool = False,
         iobound_tpe_limit: int | None = None,
+        unsafe_file_write: bool = False,
     ) -> None:
         self._cursor = cursor
         self._command = command
@@ -386,6 +387,7 @@ class SnowflakeFileTransferAgent:
         self._use_s3_regional_url = use_s3_regional_url
         self._credentials: StorageCredential | None = None
         self._iobound_tpe_limit = iobound_tpe_limit
+        self._unsafe_file_write = unsafe_file_write
 
     def execute(self) -> None:
         self._parse_command()
@@ -673,6 +675,7 @@ class SnowflakeFileTransferAgent:
                 meta,
                 self._stage_info,
                 4 * megabyte,
+                unsafe_file_write=self._unsafe_file_write,
             )
         elif self._stage_location_type == AZURE_FS:
             return SnowflakeAzureRestClient(
@@ -681,6 +684,7 @@ class SnowflakeFileTransferAgent:
                 AZURE_CHUNK_SIZE,
                 self._stage_info,
                 use_s3_regional_url=self._use_s3_regional_url,
+                unsafe_file_write=self._unsafe_file_write,
             )
         elif self._stage_location_type == S3_FS:
             return SnowflakeS3RestClient(
@@ -690,6 +694,7 @@ class SnowflakeFileTransferAgent:
                 _chunk_size_calculator(meta.src_file_size),
                 use_accelerate_endpoint=self._use_accelerate_endpoint,
                 use_s3_regional_url=self._use_s3_regional_url,
+                unsafe_file_write=self._unsafe_file_write,
             )
         elif self._stage_location_type == GCS_FS:
             return SnowflakeGCSRestClient(
@@ -699,6 +704,7 @@ class SnowflakeFileTransferAgent:
                 self._cursor._connection,
                 self._command,
                 use_s3_regional_url=self._use_s3_regional_url,
+                unsafe_file_write=self._unsafe_file_write,
             )
         raise Exception(f"{self._stage_location_type} is an unknown stage type")
 

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/gcs_storage_client.py

@@ -54,6 +54,7 @@ class SnowflakeGCSRestClient(SnowflakeStorageClient):
         cnx: SnowflakeConnection,
         command: str,
         use_s3_regional_url: bool = False,
+        unsafe_file_write: bool = False,
     ) -> None:
         """Creates a client object with given stage credentials.
 
@@ -64,7 +65,12 @@ class SnowflakeGCSRestClient(SnowflakeStorageClient):
             The client to communicate with GCS.
         """
         super().__init__(
-            meta, stage_info, -1, credentials=credentials, chunked_transfer=False
+            meta,
+            stage_info,
+            -1,
+            credentials=credentials,
+            chunked_transfer=False,
+            unsafe_file_write=unsafe_file_write,
         )
         self.stage_info = stage_info
         self._command = command

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/local_storage_client.py

@@ -26,8 +26,11 @@ class SnowflakeLocalStorageClient(SnowflakeStorageClient):
         meta: SnowflakeFileMeta,
         stage_info: dict[str, Any],
         chunk_size: int,
+        unsafe_file_write: bool = False,
     ) -> None:
-        super().__init__(meta, stage_info, chunk_size)
+        super().__init__(
+            meta, stage_info, chunk_size, unsafe_file_write=unsafe_file_write
+        )
         self.data_file = meta.src_file_name
         self.full_dst_file_name: str = os.path.join(
             stage_info["location"], os.path.basename(meta.dst_file_name)

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/network.py

@@ -188,6 +188,7 @@ OAUTH_AUTHENTICATOR = "OAUTH"
 ID_TOKEN_AUTHENTICATOR = "ID_TOKEN"
 USR_PWD_MFA_AUTHENTICATOR = "USERNAME_PASSWORD_MFA"
 PROGRAMMATIC_ACCESS_TOKEN = "PROGRAMMATIC_ACCESS_TOKEN"
+NO_AUTH_AUTHENTICATOR = "NO_AUTH"
 
 
 def is_retryable_http_code(code: int) -> bool:

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/options.py

@@ -7,7 +7,7 @@ from __future__ import annotations
 import importlib
 import os
 import warnings
-from importlib.metadata import distributions
+from importlib.metadata import PackageNotFoundError, distribution
 from logging import getLogger
 from types import ModuleType
 from typing import Union
@@ -85,13 +85,13 @@ def _import_or_missing_pandas_option() -> (
             os.environ["ARROW_DEFAULT_MEMORY_POOL"] = "system"
 
         # Check whether we have the currently supported pyarrow installed
-        installed_packages = {
-            package.metadata["Name"]: package for package in distributions()
-        }
-        if {"pyarrow", "snowflake-connector-python"} <= installed_packages.keys():
-            dependencies = installed_packages[
-                "snowflake-connector-python"
-            ].metadata.get_all("Requires-Dist", [])
+        try:
+            pyarrow_dist = distribution("pyarrow")
+            snowflake_connector_dist = distribution("snowflake-connector-python")
+
+            dependencies = snowflake_connector_dist.metadata.get_all(
+                "Requires-Dist", []
+            )
             pandas_pyarrow_extra = None
             for dependency in dependencies:
                 dep = Requirement(dependency)
@@ -103,16 +103,15 @@ def _import_or_missing_pandas_option() -> (
                     pandas_pyarrow_extra = dep
                     break
 
-            installed_pyarrow_version = installed_packages["pyarrow"].version
+            installed_pyarrow_version = pyarrow_dist.version
             if not pandas_pyarrow_extra.specifier.contains(installed_pyarrow_version):
                 warn_incompatible_dep(
                     "pyarrow", installed_pyarrow_version, pandas_pyarrow_extra
                 )
 
-        else:
+        except PackageNotFoundError as e:
             logger.info(
-                "Cannot determine if compatible pyarrow is installed because of missing package(s) from "
-                "{}".format(list(installed_packages.keys()))
+                f"Cannot determine if compatible pyarrow is installed because of missing package(s): {e}"
             )
         return pandas, pyarrow, True
     except ImportError:

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/pandas_tools.py

@@ -215,6 +215,42 @@ def _create_temp_file_format(
     return file_format_location
 
 
+def _convert_value_to_sql_option(value: Union[str, bool, int, float]) -> str:
+    if isinstance(value, str):
+        if len(value) > 1 and value.startswith("'") and value.endswith("'"):
+            return value
+        else:
+            value = value.replace(
+                "'", "''"
+            )  # escape single quotes before adding a pair of quotes
+            return f"'{value}'"
+    else:
+        return str(value)
+
+
+def _iceberg_config_statement_helper(iceberg_config: dict[str, str]) -> str:
+    ALLOWED_CONFIGS = {
+        "EXTERNAL_VOLUME",
+        "CATALOG",
+        "BASE_LOCATION",
+        "CATALOG_SYNC",
+        "STORAGE_SERIALIZATION_POLICY",
+    }
+
+    normalized = {
+        k.upper(): _convert_value_to_sql_option(v)
+        for k, v in iceberg_config.items()
+        if v is not None
+    }
+
+    if invalid_configs := set(normalized.keys()) - ALLOWED_CONFIGS:
+        raise ProgrammingError(
+            f"Invalid iceberg configurations option(s) provided {', '.join(sorted(invalid_configs))}"
+        )
+
+    return " ".join(f"{k}={v}" for k, v in normalized.items())
+
+
 def write_pandas(
     conn: SnowflakeConnection,
     df: pandas.DataFrame,
@@ -231,6 +267,7 @@ def write_pandas(
     overwrite: bool = False,
     table_type: Literal["", "temp", "temporary", "transient"] = "",
     use_logical_type: bool | None = None,
+    iceberg_config: dict[str, str] | None = None,
     **kwargs: Any,
 ) -> tuple[
     bool,
@@ -295,6 +332,14 @@ def write_pandas(
             Snowflake can interpret Parquet logical types during data loading. To enable Parquet logical types,
             set use_logical_type as True. Set to None to use Snowflakes default. For more information, see:
             https://docs.snowflake.com/en/sql-reference/sql/create-file-format
+        iceberg_config: A dictionary that can contain the following iceberg configuration values:
+                * external_volume: specifies the identifier for the external volume where
+                    the Iceberg table stores its metadata files and data in Parquet format
+                * catalog: specifies either Snowflake or a catalog integration to use for this table
+                * base_location: the base directory that snowflake can write iceberg metadata and files to
+                * catalog_sync: optionally sets the catalog integration configured for Polaris Catalog
+                * storage_serialization_policy: specifies the storage serialization policy for the table
+
 
 
     Returns:
@@ -479,9 +524,14 @@ def write_pandas(
             quote_identifiers,
         )
 
+        iceberg = "ICEBERG " if iceberg_config else ""
+        iceberg_config_statement = _iceberg_config_statement_helper(
+            iceberg_config or {}
+        )
+
         create_table_sql = (
-            f"CREATE {table_type.upper()} TABLE IF NOT EXISTS identifier(?) "
-            f"({create_table_columns})"
+            f"CREATE {table_type.upper()} {iceberg}TABLE IF NOT EXISTS identifier(?) "
+            f"({create_table_columns}) {iceberg_config_statement}"
             f" /* Python:snowflake.connector.pandas_tools.write_pandas() */ "
         )
         params = (target_table_location,)

{snowflake_connector_python-3.13.2 → snowflake_connector_python-3.14.0}/src/snowflake/connector/s3_storage_client.py

@@ -61,13 +61,20 @@ class SnowflakeS3RestClient(SnowflakeStorageClient):
         chunk_size: int,
         use_accelerate_endpoint: bool | None = None,
         use_s3_regional_url: bool = False,
+        unsafe_file_write: bool = False,
     ) -> None:
         """Rest client for S3 storage.
 
         Args:
             stage_info:
         """
-        super().__init__(meta, stage_info, chunk_size, credentials=credentials)
+        super().__init__(
+            meta,
+            stage_info,
+            chunk_size,
+            credentials=credentials,
+            unsafe_file_write=unsafe_file_write,
+        )
         # Signature version V4
         # Addressing style Virtual Host
         self.region_name: str = stage_info["region"]