snowflake-connector-python 4.8.0__tar.gz → 4.8.1__tar.gz

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/CONTRIBUTING.md

@@ -30,8 +30,8 @@ dependencies installed with `snowflake-connector-python` installed as an editabl
 Setting up a development environment is super easy with this [one simple tox command](https://tox.wiki/en/legacy/example/devenv.html).
 
 ```shell
-tox --devenv venv310 -e py310
-. venv310/bin/activate
+tox --devenv venv311 -e py311
+. venv311/bin/activate
 ```
 
 Note: we suggest using the lowest supported Python version for development.

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/DESCRIPTION.md

@@ -7,6 +7,15 @@ https://docs.snowflake.com/
 Source code is also available at: https://github.com/snowflakedb/snowflake-connector-python
 
 # Release Notes
+- v4.8.1(Oct 26,2026)
+  - Fixed `write_pandas` identifier quoting. Parquet field paths are quoted, Iceberg option values are escaped string literals, and `quote_identifiers=False` accepts only valid unquoted identifiers.
+  - Dropped support for Python 3.10. The minimum supported version is now Python 3.11.
+  - Bumped vendored `urllib3` to `2.8.0`. This includes the upstream fix for importing the connector on Python built against OpenSSL 4, where `ssl.PROTOCOL_TLSv1` no longer exists (SNOW-4232077).
+  - Fixed large result set batch chunk download logging every transient retry at ERROR level with a traceback. Intermediate retries now log at WARNING; only the final failure after all retries are exhausted logs at ERROR with a traceback. These retry and failure logs now also include the S3 request IDs (`x-amz-request-id` / `x-amz-id-2`) when present, to aid troubleshooting and correlation with AWS-side records (SNOW-4218352).
+  - Fixed a spurious `RequestsDependencyWarning` emitted at import time by the vendored `requests` when a newer `chardet` (7.x) or `charset_normalizer` is installed. `check_compatibility()` still requires `chardet >= 3.0.2` and `charset_normalizer >= 2.0.0`, but no longer rejects newer majors (SNOW-3559506).
+  - Raised the minimum certifi requirement to 2026.10.18
+  - Raised filelock upper bound dependency to allow installation of filelock 4.X.
+
 - v4.8.0(Sep 30,2026)
   - Fixed external-browser (SSO) authentication to validate the `Origin` header on the local callback server, rejecting tokens delivered from unexpected origins. A trailing slash in the origin (e.g. `https://account.snowflakecomputing.com/`) is now accepted on par with the bare origin, matching JDBC and other driver behaviour. Preconnect probe connections (empty recv) no longer count against the retry budget and no longer abort the login flow.
   - Added the `SNOWFLAKE_TLS_CIPHERS` environment variable to restrict which TLS ciphers the connector offers. It takes a colon-separated list; names beginning with `TLS_` are applied as TLS 1.3 cipher suites and the remainder as the cipher list for TLS 1.2 and below, so a single variable covers both. Leaving it unset keeps OpenSSL's defaults unchanged, and an unrecognized cipher name is rejected rather than silently ignored. The restriction covers Snowflake API traffic, cloud-storage (stage) transfers, OCSP/CRL fetches and IdP requests. Requests issued by the AWS and Azure SDKs, and asynchronous connections, are not covered — for TLS 1.3 suites specifically they cannot be, because the Python standard library exposes no API for restricting them.
@@ -39,6 +48,7 @@ Source code is also available at: https://github.com/snowflakedb/snowflake-conne
   - Improved the robustness and correctness of OCSP revocation checking (SNOW-3675581).
     - When `SF_OCSP_RESPONSE_CACHE_SERVER_URL` is set, the connector uses it as the OCSP cache server, including on PrivateLink hosts.
     - A PrivateLink OCSP cache URL is derived only for hosts that consist of hostname characters, include a `.privatelink.` label, and end at `snowflakecomputing.com`, `.cn`, or `.mil`. Other hosts use the public default cache URL; set `SF_OCSP_RESPONSE_CACHE_SERVER_URL` to use a different cache server.
+    - Please review [Snowflake documentation](https://docs.snowflake.com/en/release-notes/clients-drivers/python-connector-2026#version-473-sep-3-2026) for possible implications to your workflow
   - Extended log secret masking coverage (SNOW-3675583). The connection-token pattern accepts `:` and `%` in the token value. Added patterns for OAuth access and refresh tokens in serialized JSON, for one-time passcodes, and for OAuth client identifiers and secrets. The passcode pattern accepts quoted values. The password pattern requires at least six characters in the value, so ordinary prose following the word "password" is not redacted.
   - Request headers are copied before mutation on the async path, and masking is applied to the `Authorization` header in error logs (SNOW-3675593).
   - Applied secret masking to the `snowflake.connector` loggers by default, independent of how application logging is configured. The same filter also covers the third-party loggers the connector uses (`botocore`, `boto3`, `aiohttp`, `aiobotocore`, `aioboto3`, vendored `urllib3`). Set `SNOWFLAKE_DISABLE_LOG_SECRET_MASKING=true` to opt out; it is honored at emit time, including after import (SNOW-3675583).

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: snowflake-connector-python
-Version: 4.8.0
+Version: 4.8.1
 Summary: Snowflake Connector for Python
 Home-page: https://www.snowflake.com/
 Author: Snowflake, Inc
@@ -22,7 +22,6 @@ Classifier: License :: OSI Approved :: Apache Software License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
@@ -35,7 +34,7 @@ Classifier: Topic :: Software Development
 Classifier: Topic :: Software Development :: Libraries
 Classifier: Topic :: Software Development :: Libraries :: Application Frameworks
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
-Requires-Python: >=3.10
+Requires-Python: >=3.11
 Description-Content-Type: text/markdown
 License-File: LICENSE.txt
 License-File: NOTICE
@@ -48,9 +47,9 @@ Requires-Dist: requests<3.0.0,>=2.32.4
 Requires-Dist: packaging
 Requires-Dist: charset_normalizer<4,>=2
 Requires-Dist: idna<4,>=3.7
-Requires-Dist: certifi>=2024.7.4
+Requires-Dist: certifi>=2026.10.18
 Requires-Dist: typing_extensions<5,>=4.3
-Requires-Dist: filelock<4,>=3.5
+Requires-Dist: filelock<5,>=3.12
 Requires-Dist: sortedcontainers>=2.4.0
 Requires-Dist: platformdirs<5.0.0,>=2.6.0
 Requires-Dist: tomlkit
@@ -97,6 +96,15 @@ https://docs.snowflake.com/
 Source code is also available at: https://github.com/snowflakedb/snowflake-connector-python
 
 # Release Notes
+- v4.8.1(Oct 26,2026)
+  - Fixed `write_pandas` identifier quoting. Parquet field paths are quoted, Iceberg option values are escaped string literals, and `quote_identifiers=False` accepts only valid unquoted identifiers.
+  - Dropped support for Python 3.10. The minimum supported version is now Python 3.11.
+  - Bumped vendored `urllib3` to `2.8.0`. This includes the upstream fix for importing the connector on Python built against OpenSSL 4, where `ssl.PROTOCOL_TLSv1` no longer exists (SNOW-4232077).
+  - Fixed large result set batch chunk download logging every transient retry at ERROR level with a traceback. Intermediate retries now log at WARNING; only the final failure after all retries are exhausted logs at ERROR with a traceback. These retry and failure logs now also include the S3 request IDs (`x-amz-request-id` / `x-amz-id-2`) when present, to aid troubleshooting and correlation with AWS-side records (SNOW-4218352).
+  - Fixed a spurious `RequestsDependencyWarning` emitted at import time by the vendored `requests` when a newer `chardet` (7.x) or `charset_normalizer` is installed. `check_compatibility()` still requires `chardet >= 3.0.2` and `charset_normalizer >= 2.0.0`, but no longer rejects newer majors (SNOW-3559506).
+  - Raised the minimum certifi requirement to 2026.10.18
+  - Raised filelock upper bound dependency to allow installation of filelock 4.X.
+
 - v4.8.0(Sep 30,2026)
   - Fixed external-browser (SSO) authentication to validate the `Origin` header on the local callback server, rejecting tokens delivered from unexpected origins. A trailing slash in the origin (e.g. `https://account.snowflakecomputing.com/`) is now accepted on par with the bare origin, matching JDBC and other driver behaviour. Preconnect probe connections (empty recv) no longer count against the retry budget and no longer abort the login flow.
   - Added the `SNOWFLAKE_TLS_CIPHERS` environment variable to restrict which TLS ciphers the connector offers. It takes a colon-separated list; names beginning with `TLS_` are applied as TLS 1.3 cipher suites and the remainder as the cipher list for TLS 1.2 and below, so a single variable covers both. Leaving it unset keeps OpenSSL's defaults unchanged, and an unrecognized cipher name is rejected rather than silently ignored. The restriction covers Snowflake API traffic, cloud-storage (stage) transfers, OCSP/CRL fetches and IdP requests. Requests issued by the AWS and Azure SDKs, and asynchronous connections, are not covered — for TLS 1.3 suites specifically they cannot be, because the Python standard library exposes no API for restricting them.
@@ -129,6 +137,7 @@ Source code is also available at: https://github.com/snowflakedb/snowflake-conne
   - Improved the robustness and correctness of OCSP revocation checking (SNOW-3675581).
     - When `SF_OCSP_RESPONSE_CACHE_SERVER_URL` is set, the connector uses it as the OCSP cache server, including on PrivateLink hosts.
     - A PrivateLink OCSP cache URL is derived only for hosts that consist of hostname characters, include a `.privatelink.` label, and end at `snowflakecomputing.com`, `.cn`, or `.mil`. Other hosts use the public default cache URL; set `SF_OCSP_RESPONSE_CACHE_SERVER_URL` to use a different cache server.
+    - Please review [Snowflake documentation](https://docs.snowflake.com/en/release-notes/clients-drivers/python-connector-2026#version-473-sep-3-2026) for possible implications to your workflow
   - Extended log secret masking coverage (SNOW-3675583). The connection-token pattern accepts `:` and `%` in the token value. Added patterns for OAuth access and refresh tokens in serialized JSON, for one-time passcodes, and for OAuth client identifiers and secrets. The passcode pattern accepts quoted values. The password pattern requires at least six characters in the value, so ordinary prose following the word "password" is not redacted.
   - Request headers are copied before mutation on the async path, and masking is applied to the `Authorization` header in error logs (SNOW-3675593).
   - Applied secret masking to the `snowflake.connector` loggers by default, independent of how application logging is configured. The same filter also covers the third-party loggers the connector uses (`botocore`, `boto3`, `aiohttp`, `aiobotocore`, `aioboto3`, vendored `urllib3`). Set `SNOWFLAKE_DISABLE_LOG_SECRET_MASKING=true` to opt out; it is honored at emit time, including after import (SNOW-3675583).

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/README.md

@@ -1,7 +1,7 @@
 # Snowflake Connector for Python
 
 > [!IMPORTANT]
-> A new version of the driver is being developed in [snowflakedb/drivers](https://github.com/snowflakedb/drivers) and is currently in public preview. See the [documentation](https://docs.snowflake.com/en/developer-guide/python-connector/python-connector-universal-core) for more information.
+> Version 5.0.0 of the Snowflake Connector for Python has been released. Development has moved to [snowflakedb/drivers](https://github.com/snowflakedb/drivers). See the [documentation](https://docs.snowflake.com/en/developer-guide/universal-core/universal-core) for more information.
 
 This package includes the Snowflake Connector for Python, which conforms to the [Python DB API 2.0](https://www.python.org/dev/peps/pep-0249/) specification.
 
@@ -12,7 +12,7 @@ using the Snowflake JDBC or ODBC drivers.
 
 The connector has **no** dependencies on JDBC or ODBC.
 It can be installed using ``pip`` on Linux, Mac OSX, and Windows platforms
-where Python 3.10.0 (or higher) is installed.
+where Python 3.11.0 (or higher) is installed.
 
 Snowflake Documentation is available at:
 https://docs.snowflake.com/
@@ -39,7 +39,7 @@ Find the `snowflake_connector_python*.whl` package in the `./dist` directory.
 ### In Docker
 Or use our Dockerized build script `ci/build_docker.sh` and find the built wheel files in `dist/repaired_wheels`.
 
-Note: `ci/build_docker.sh` can be used to compile only certain versions, like this: `ci/build_docker.sh "3.10 3.11"`
+Note: `ci/build_docker.sh` can be used to compile only certain versions, like this: `ci/build_docker.sh "3.11 3.12"`
 
 ## Code hygiene and other utilities
 These tools are integrated into `tox` to allow us to easily set them up universally on any computer.

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/setup.cfg

@@ -20,7 +20,6 @@ classifiers =
 	Operating System :: OS Independent
 	Programming Language :: Python :: 3
 	Programming Language :: Python :: 3 :: Only
-	Programming Language :: Python :: 3.10
 	Programming Language :: Python :: 3.11
 	Programming Language :: Python :: 3.12
 	Programming Language :: Python :: 3.13
@@ -41,7 +40,7 @@ project_urls =
 	Changelog=https://github.com/snowflakedb/snowflake-connector-python/blob/main/DESCRIPTION.md
 
 [options]
-python_requires = >=3.10
+python_requires = >=3.11
 packages = find_namespace:
 install_requires = 
 	asn1crypto>0.24.0,<2.0.0
@@ -53,9 +52,9 @@ install_requires =
 	packaging
 	charset_normalizer>=2,<4
 	idna>=3.7,<4
-	certifi>=2024.7.4
+	certifi>=2026.10.18
 	typing_extensions>=4.3,<5
-	filelock>=3.5,<4
+	filelock>=3.12,<5
 	sortedcontainers>=2.4.0
 	platformdirs>=2.6.0,<5.0.0
 	tomlkit

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/aio/_pandas_tools.py

@@ -12,6 +12,8 @@ from snowflake.connector.options import pandas
 # Import utilities from sync version
 from snowflake.connector.pandas_tools import (
     _iceberg_config_statement_helper,
+    _quote_sql_identifier,
+    _sql_column_identifier,
     build_location_helper,
     chunk_helper,
 )
@@ -240,7 +242,8 @@ async def write_pandas(
             https://docs.snowflake.com/en/sql-reference/sql/put.html#optional-parameters (Default value = 4).
         quote_identifiers: By default, identifiers, specifically database, schema, table and column names
             (from df.columns) will be quoted. If set to False, identifiers are passed on to Snowflake without quoting.
-            I.e. identifiers will be coerced to uppercase by Snowflake.  (Default value = True)
+            I.e. identifiers will be coerced to uppercase by Snowflake. Column names in this mode must be valid
+            Snowflake unquoted identifiers.  (Default value = True)
         infer_schema: Perform explicit schema inference on the data in the DataFrame and use the inferred data types
             when selecting columns from the DataFrame. (Default value = False)
         auto_create_table: When true, will automatically create a table with corresponding columns for each column in
@@ -335,6 +338,15 @@ async def write_pandas(
     else:
         sql_use_logical_type = " USE_LOGICAL_TYPE = FALSE"
 
+    # Validate/quote column names before creating temp objects or uploading.
+    # `$1:"field"` path syntax does not support IDENTIFIER(?) or ? bindings; always quote it.
+    # quote_identifiers only controls CREATE/COPY column lists (case-folding), not the parquet path.
+    snowflake_column_names = [
+        _sql_column_identifier(c, quote_identifiers) for c in df.columns
+    ]
+    parquet_field_names = [_quote_sql_identifier(c) for c in df.columns]
+    columns = ",".join(snowflake_column_names)
+
     cursor = conn.cursor()
     stage_location = await _create_temp_stage(
         cursor,
@@ -373,18 +385,6 @@ async def write_pandas(
                 options={"parallel": parallel, "source_compression": "auto_detect"},
             )
 
-    # in Snowflake, all parquet data is stored in a single column, $1, so we must select columns explicitly
-    # see (https://docs.snowflake.com/en/user-guide/script-data-load-transform-parquet.html)
-    if quote_identifiers:
-        quote = '"'
-        # if the column name contains a double quote, we need to escape it by replacing with two double quotes
-        # https://docs.snowflake.com/en/sql-reference/identifiers-syntax#double-quoted-identifiers
-        snowflake_column_names = [str(c).replace('"', '""') for c in df.columns]
-    else:
-        quote = ""
-        snowflake_column_names = list(df.columns)
-    columns = quote + f"{quote},{quote}".join(snowflake_column_names) + quote
-
     async def drop_object(name: str, object_type: str) -> None:
         drop_sql = f"DROP {object_type.upper()} IF EXISTS identifier(?) /* Python:snowflake.connector.aio._pandas_tools.write_pandas() */"
         params = (name,)
@@ -427,7 +427,7 @@ async def write_pandas(
         # columns in order
         create_table_columns = ", ".join(
             [
-                f"{quote}{snowflake_col}{quote} {column_type_mapping[col]}"
+                f"{snowflake_col} {column_type_mapping[col]}"
                 for snowflake_col, col in zip(snowflake_column_names, df.columns)
             ]
         )
@@ -468,8 +468,8 @@ async def write_pandas(
 
         # need explicit casting when the underlying table schema is inferred
         parquet_columns = "$1:" + ",$1:".join(
-            f"{quote}{snowflake_col}{quote}::{column_type_mapping[col]}"
-            for snowflake_col, col in zip(snowflake_column_names, df.columns)
+            f"{parquet_field}::{column_type_mapping[col]}"
+            for parquet_field, col in zip(parquet_field_names, df.columns)
         )
     else:
         target_table_location = build_location_helper(
@@ -478,9 +478,7 @@ async def write_pandas(
             name=table_name,
             quote_identifiers=quote_identifiers,
         )
-        parquet_columns = "$1:" + ",$1:".join(
-            f"{quote}{snowflake_col}{quote}" for snowflake_col in snowflake_column_names
-        )
+        parquet_columns = "$1:" + ",$1:".join(parquet_field_names)
 
     try:
         if overwrite and (not auto_create_table):

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/aio/_result_batch.py

@@ -34,6 +34,7 @@ from snowflake.connector.result_batch import RemoteChunkInfo
 from snowflake.connector.result_batch import ResultBatch as ResultBatchSync
 from snowflake.connector.result_batch import (
     _create_nanoarrow_iterator,
+    _s3_request_id_log_suffix,
     inline_first_chunk_rowcount,
 )
 from snowflake.connector.secret_detector import SecretDetector
@@ -232,6 +233,7 @@ class ResultBatch(ResultBatchSync):
 
         content, encoding = None, None
         for retry in range(max(MAX_DOWNLOAD_RETRY, 1)):
+            amz_request_id_suffix = ""
             try:
 
                 async with TimerContextManager() as download_metric:
@@ -284,6 +286,7 @@ class ResultBatch(ResultBatchSync):
                         ) as session:
                             response, content, encoding = await download_chunk(session)
 
+                    amz_request_id_suffix = _s3_request_id_log_suffix(response)
                     if response.status == OK:
                         break
                     # Raise error here to correctly go in to exception clause
@@ -301,12 +304,18 @@ class ResultBatch(ResultBatchSync):
                 if retry == MAX_DOWNLOAD_RETRY - 1:
                     # Re-throw if we failed on the last retry
                     e = e.args[0] if isinstance(e, RetryRequest) else e
+                    logger.error(
+                        f"Failed to fetch the large result set batch "
+                        f"{self.id} after {MAX_DOWNLOAD_RETRY} attempts, "
+                        f"giving up for the reason: '{e}'{amz_request_id_suffix}",
+                        exc_info=True,
+                    )
                     raise e
                 sleep_timer = next(backoff)
-                logger.exception(
+                logger.warning(
                     f"Failed to fetch the large result set batch "
                     f"{self.id} for the {retry + 1} th time, "
-                    f"backing off for {sleep_timer}s for the reason: '{e}'"
+                    f"backing off for {sleep_timer}s for the reason: '{e}'{amz_request_id_suffix}"
                 )
                 await asyncio.sleep(sleep_timer)
 

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/pandas_tools.py

@@ -2,6 +2,7 @@ from __future__ import annotations
 
 import collections.abc
 import os
+import re
 import warnings
 from functools import partial
 from logging import getLogger
@@ -41,6 +42,36 @@ T = TypeVar("T", bound=collections.abc.Sequence)
 
 logger = getLogger(__name__)
 
+# Snowflake unquoted identifiers: start with letter/underscore, then alnum/_/$.
+# https://docs.snowflake.com/en/sql-reference/identifiers-syntax
+_UNQUOTED_IDENTIFIER_RE = re.compile(r"^[A-Za-z_][A-Za-z0-9_$]*$")
+
+
+def _quote_sql_identifier(name: str) -> str:
+    """Double-quote a SQL identifier, escaping internal double quotes."""
+    return '"' + str(name).replace('"', '""') + '"'
+
+
+def _sql_column_identifier(name: str, quote_identifiers: bool) -> str:
+    """Format a DataFrame column name for interpolation into DDL/DML.
+
+    When quote_identifiers is True, the name is always emitted as a quoted
+    identifier. When False, the name is left unquoted so Snowflake can
+    case-fold it, but only if it is a valid unquoted identifier — otherwise
+    SQL metacharacters in the name would be interpolated as SQL.
+    """
+    name = str(name)
+    if quote_identifiers:
+        return _quote_sql_identifier(name)
+    if not _UNQUOTED_IDENTIFIER_RE.fullmatch(name):
+        raise ProgrammingError(
+            f"Invalid unquoted identifier {name!r}. Column names used with "
+            "quote_identifiers=False must be valid Snowflake unquoted identifiers "
+            "(letter or underscore, then letters, digits, underscores, or dollar "
+            "signs). Set quote_identifiers=True to use arbitrary column names."
+        )
+    return name
+
 
 def chunk_helper(
     lst: pandas.DataFrame, n: int
@@ -207,17 +238,18 @@ def _create_temp_file_format(
     return file_format_location
 
 
-def _convert_value_to_sql_option(value: Union[str, bool, int, float]) -> str:
+def _convert_value_to_sql_option(value: str | bool | int | float) -> str:
+    """Convert a Python value to a SQL option literal for iceberg config.
+
+    String values are always emitted as one escaped single-quoted literal,
+    including values that already start and end with quotes. Backslashes are
+    doubled before quotes because Snowflake treats ``\\`` as an escape inside
+    ``'...'``.
+    """
     if isinstance(value, str):
-        if len(value) > 1 and value.startswith("'") and value.endswith("'"):
-            return value
-        else:
-            value = value.replace(
-                "'", "''"
-            )  # escape single quotes before adding a pair of quotes
-            return f"'{value}'"
-    else:
-        return str(value)
+        escaped = value.replace("\\", "\\\\").replace("'", "''")
+        return f"'{escaped}'"
+    return str(value)
 
 
 def _iceberg_config_statement_helper(iceberg_config: dict[str, str]) -> str:
@@ -316,7 +348,8 @@ def write_pandas(
             https://docs.snowflake.com/en/sql-reference/sql/put.html#optional-parameters (Default value = 4).
         quote_identifiers: By default, identifiers, specifically database, schema, table and column names
             (from df.columns) will be quoted. If set to False, identifiers are passed on to Snowflake without quoting.
-            I.e. identifiers will be coerced to uppercase by Snowflake.  (Default value = True)
+            I.e. identifiers will be coerced to uppercase by Snowflake. Column names in this mode must be valid
+            Snowflake unquoted identifiers.  (Default value = True)
         infer_schema: Perform explicit schema inference on the data in the DataFrame and use the inferred data types
             when selecting columns from the DataFrame. (Default value = False)
         auto_create_table: When true, will automatically create a table with corresponding columns for each column in
@@ -422,6 +455,15 @@ def write_pandas(
     else:
         sql_use_logical_type = " USE_LOGICAL_TYPE = FALSE"
 
+    # Validate/quote column names before creating temp objects or uploading.
+    # `$1:"field"` path syntax does not support IDENTIFIER(?) or ? bindings; always quote it.
+    # quote_identifiers only controls CREATE/COPY column lists (case-folding), not the parquet path.
+    snowflake_column_names = [
+        _sql_column_identifier(c, quote_identifiers) for c in df.columns
+    ]
+    parquet_field_names = [_quote_sql_identifier(c) for c in df.columns]
+    columns = ",".join(snowflake_column_names)
+
     cursor = conn.cursor()
     stage_location = _create_temp_stage(
         cursor,
@@ -460,18 +502,6 @@ def write_pandas(
                 options={"parallel": parallel, "source_compression": "auto_detect"},
             )
 
-    # in Snowflake, all parquet data is stored in a single column, $1, so we must select columns explicitly
-    # see (https://docs.snowflake.com/en/user-guide/script-data-load-transform-parquet.html)
-    if quote_identifiers:
-        quote = '"'
-        # if the column name contains a double quote, we need to escape it by replacing with two double quotes
-        # https://docs.snowflake.com/en/sql-reference/identifiers-syntax#double-quoted-identifiers
-        snowflake_column_names = [str(c).replace('"', '""') for c in df.columns]
-    else:
-        quote = ""
-        snowflake_column_names = list(df.columns)
-    columns = quote + f"{quote},{quote}".join(snowflake_column_names) + quote
-
     def drop_object(name: str, object_type: str) -> None:
         drop_sql = f"DROP {object_type.upper()} IF EXISTS identifier(?) /* Python:snowflake.connector.pandas_tools.write_pandas() */"
         params = (name,)
@@ -512,7 +542,7 @@ def write_pandas(
         # columns in order
         create_table_columns = ", ".join(
             [
-                f"{quote}{snowflake_col}{quote} {column_type_mapping[col]}"
+                f"{snowflake_col} {column_type_mapping[col]}"
                 for snowflake_col, col in zip(snowflake_column_names, df.columns)
             ]
         )
@@ -553,8 +583,8 @@ def write_pandas(
 
         # need explicit casting when the underlying table schema is inferred
         parquet_columns = "$1:" + ",$1:".join(
-            f"{quote}{snowflake_col}{quote}::{column_type_mapping[col]}"
-            for snowflake_col, col in zip(snowflake_column_names, df.columns)
+            f"{parquet_field}::{column_type_mapping[col]}"
+            for parquet_field, col in zip(parquet_field_names, df.columns)
         )
     else:
         target_table_location = build_location_helper(
@@ -563,9 +593,7 @@ def write_pandas(
             name=table_name,
             quote_identifiers=quote_identifiers,
         )
-        parquet_columns = "$1:" + ",$1:".join(
-            f"{quote}{snowflake_col}{quote}" for snowflake_col in snowflake_column_names
-        )
+        parquet_columns = "$1:" + ",$1:".join(parquet_field_names)
 
     try:
         if overwrite and (not auto_create_table):

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/result_batch.py

@@ -55,6 +55,29 @@ MAX_INLINE_RESULT_RETRY = 1
 MAX_INCOMPLETE_CHUNK_RETRY = 1
 
 
+def _s3_request_id_log_suffix(response: Response | None) -> str:
+    """Return a ``', S3 request id: ..., S3 extended request id: ...'`` log suffix, or ``''``.
+
+    S3 returns these trace headers (``x-amz-request-id`` / ``x-amz-id-2``) on every
+    response, including error responses, so surfacing them in the retry/failure logs
+    lets support correlate a failed chunk download with AWS-side records. Empty string
+    when no response arrived (pure network failure) or the headers are absent (non-S3
+    stage).
+    """
+    headers = getattr(response, "headers", None)
+    if headers is None or not hasattr(headers, "get"):
+        return ""
+    parts = []
+    for name, label in (
+        ("x-amz-request-id", "S3 request id"),
+        ("x-amz-id-2", "S3 extended request id"),
+    ):
+        value = headers.get(name)
+        if isinstance(value, str) and value:
+            parts.append(f"{label}: {value}")
+    return f", {', '.join(parts)}" if parts else ""
+
+
 def inline_first_chunk_rowcount(data: dict[str, Any]) -> int:
     """Rows attributed to the inline first chunk: ``total`` minus remote chunk rowCounts.
 
@@ -520,6 +543,7 @@ class ResultBatch(abc.ABC):
             else exponential_backoff()()
         )
         for retry in range(MAX_DOWNLOAD_RETRY):
+            amz_request_id_suffix = ""
             try:
                 with TimerContextManager() as download_metric:
                     logger.debug(f"started downloading result batch id: {self.id}")
@@ -560,6 +584,7 @@ class ResultBatch(abc.ABC):
                         )
                         response = local_session_manager.get(**request_data)
 
+                    amz_request_id_suffix = _s3_request_id_log_suffix(response)
                     if response.status_code == OK:
                         logger.debug(
                             f"successfully downloaded result batch id: {self.id}"
@@ -581,12 +606,18 @@ class ResultBatch(abc.ABC):
                 if retry == MAX_DOWNLOAD_RETRY - 1:
                     # Re-throw if we failed on the last retry
                     e = e.args[0] if isinstance(e, RetryRequest) else e
+                    logger.error(
+                        f"Failed to fetch the large result set batch "
+                        f"{self.id} after {MAX_DOWNLOAD_RETRY} attempts, "
+                        f"giving up for the reason: '{e}'{amz_request_id_suffix}",
+                        exc_info=True,
+                    )
                     raise e
                 sleep_timer = next(backoff)
-                logger.exception(
+                logger.warning(
                     f"Failed to fetch the large result set batch "
                     f"{self.id} for the {retry + 1} th time, "
-                    f"backing off for {sleep_timer}s for the reason: '{e}'"
+                    f"backing off for {sleep_timer}s for the reason: '{e}'{amz_request_id_suffix}"
                 )
                 time.sleep(sleep_timer)
 

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/vendored/requests/__init__.py

@@ -75,13 +75,13 @@ def check_compatibility(urllib3_version, chardet_version, charset_normalizer_ver
     if chardet_version:
         major, minor, patch = chardet_version.split(".")[:3]
         major, minor, patch = int(major), int(minor), int(patch)
-        # chardet_version >= 3.0.2, < 6.0.0
-        assert (3, 0, 2) <= (major, minor, patch) < (6, 0, 0)
+        # chardet_version >= 3.0.2
+        assert (3, 0, 2) <= (major, minor, patch)
     elif charset_normalizer_version:
         major, minor, patch = charset_normalizer_version.split(".")[:3]
         major, minor, patch = int(major), int(minor), int(patch)
-        # charset_normalizer >= 2.0.0 < 4.0.0
-        assert (2, 0, 0) <= (major, minor, patch) < (4, 0, 0)
+        # charset_normalizer >= 2.0.0
+        assert (2, 0, 0) <= (major, minor, patch)
     else:
         warnings.warn(
             "Unable to find acceptable character detection dependency "

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/vendored/urllib3/_collections.py

@@ -400,6 +400,9 @@ class HTTPHeaderDict(typing.MutableMapping[str, str]):
         """
         Remove content-specific header fields before changing the request
         method to GET or HEAD according to RFC 9110, Section 15.4.
+
+        ``Transfer-Encoding`` goes as well: it frames a request body that is
+        no longer going to be sent.
         """
         content_specific_headers = [
             "Content-Encoding",
@@ -409,6 +412,7 @@ class HTTPHeaderDict(typing.MutableMapping[str, str]):
             "Content-Length",
             "Digest",
             "Last-Modified",
+            "Transfer-Encoding",
         ]
         for header in content_specific_headers:
             self.discard(header)

{snowflake_connector_python-4.8.0 → snowflake_connector_python-4.8.1}/src/snowflake/connector/vendored/urllib3/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '2.7.0'
-__version_tuple__ = version_tuple = (2, 7, 0)
+__version__ = version = '2.8.0'
+__version_tuple__ = version_tuple = (2, 8, 0)
 
 __commit_id__ = commit_id = None