snowflake-connector-python 5.0.0rc4__tar.gz → 5.1.0__tar.gz

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/Cargo.lock

@@ -2434,15 +2434,6 @@ dependencies = [
  "either",
 ]
 
-[[package]]
-name = "itertools"
-version = "0.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b1c173a5686ce8bfa551b3563d0c2170bf24ca44da99c7ca4bfdab5418c3fe57"
-dependencies = [
- "either",
-]
-
 [[package]]
 name = "itertools"
 version = "0.14.0"
@@ -3646,7 +3637,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "81bddcdb20abf9501610992b6759a4c888aef7d1a7247ef75e2404275ac24af1"
 dependencies = [
  "anyhow",
- "itertools 0.11.0",
+ "itertools 0.10.5",
  "proc-macro2",
  "quote",
  "syn 2.0.117",
@@ -4230,9 +4221,7 @@ dependencies = [
 
 [[package]]
 name = "rustls-webpki"
-version = "0.103.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8572f3c2cb9934231157b45499fc41e1f58c589fdfb81a844ba873265e80f8eb"
+version = "0.103.16"
 dependencies = [
  "aws-lc-rs",
  "ring",
@@ -4423,6 +4412,7 @@ dependencies = [
  "async-trait",
  "aws-config",
  "aws-credential-types",
+ "aws-lc-fips-sys",
  "aws-lc-rs",
  "aws-runtime",
  "aws-sdk-s3",
@@ -4452,7 +4442,6 @@ dependencies = [
  "futures",
  "glob",
  "hex",
- "hmac",
  "html-escape",
  "http 1.3.1",
  "http-body 1.0.1",
@@ -4485,6 +4474,7 @@ dependencies = [
  "rustls",
  "rustls-native-certs",
  "rustls-pemfile",
+ "rustls-webpki",
  "scopeguard",
  "serde",
  "serde_json",
@@ -4515,6 +4505,7 @@ dependencies = [
  "urlencoding",
  "uuid",
  "webbrowser",
+ "webpki-roots",
  "wiremock",
  "x509-cert",
  "x509-parser",
@@ -5599,9 +5590,9 @@ dependencies = [
 
 [[package]]
 name = "webpki-roots"
-version = "1.0.2"
+version = "1.0.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e8983c3ab33d6fb807cfcdad2491c4ea8cbc8ed839181c7dfd9c67c83e261b2"
+checksum = "1c1c8e20c8a38fc7d65abfe74eb7280e4aa667e8eec8bc84996d2874810748d9"
 dependencies = [
  "rustls-pki-types",
 ]

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/Cargo.toml

@@ -21,3 +21,8 @@ resolver = "2"
 strip = true
 opt-level = "z"
 lto = false
+
+# Same override as the main workspace Cargo.toml. The sdist workspace does
+# not inherit that patch.
+[patch.crates-io]
+rustls-webpki = { path = "sf_core/third_party/rustls-webpki" }

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: snowflake-connector-python
-Version: 5.0.0rc4
+Version: 5.1.0
 Summary: Snowflake DB driver for Python
 Project-URL: Homepage, https://github.com/snowflakedb/drivers
 Project-URL: Bug Reports, https://github.com/snowflakedb/drivers/issues
@@ -16,6 +16,7 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: Free Threading :: 2 - Beta
 Classifier: Topic :: Database
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Requires-Python: >=3.11
@@ -32,7 +33,7 @@ Requires-Dist: types-protobuf; extra == 'dev'
 Requires-Dist: types-pytz; extra == 'dev'
 Provides-Extra: pandas
 Requires-Dist: pandas<3.0.0,>=1.0.0; (python_version < '3.13') and extra == 'pandas'
-Requires-Dist: pandas>=2.1.2; (python_version >= '3.13') and extra == 'pandas'
+Requires-Dist: pandas<3.0.0,>=2.1.2; (python_version >= '3.13') and extra == 'pandas'
 Requires-Dist: pyarrow>=14.0.1; extra == 'pandas'
 Provides-Extra: pyarrow
 Requires-Dist: pyarrow>=14.0.1; extra == 'pyarrow'
@@ -45,6 +46,7 @@ Requires-Dist: numpy>=2.1.0; (python_version >= '3.13') and extra == 'test'
 Requires-Dist: pytest-cov; extra == 'test'
 Requires-Dist: pytest-json-report; extra == 'test'
 Requires-Dist: pytest-randomly; extra == 'test'
+Requires-Dist: pytest-rerunfailures; extra == 'test'
 Requires-Dist: pytest-split; extra == 'test'
 Requires-Dist: pytest-timeout; extra == 'test'
 Requires-Dist: pytest-xdist; extra == 'test'
@@ -57,9 +59,6 @@ Description-Content-Type: text/markdown
 
 # Snowflake Connector for Python
 
-> [!CAUTION]
-> This version of the driver is in public preview and is not ready for use with production data and may be unstable.
-
 This package includes the Snowflake Connector for Python, which conforms to the [Python DB API 2.0](https://www.python.org/dev/peps/pep-0249/) specification.
 
 The Snowflake Connector for Python provides an interface for developing Python
@@ -186,4 +185,4 @@ PYTHON_REFERENCE_DRIVER_VERSION='==4.3.0' hatch run reference:test
 ## References
 
 - [PEP 249 - Python Database API Specification v2.0](https://peps.python.org/pep-0249/)
-- [Python Database API Specification v2.0](https://www.python.org/dev/peps/pep-0249/) 
+- [Python Database API Specification v2.0](https://www.python.org/dev/peps/pep-0249/)

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/README.md

@@ -1,8 +1,5 @@
 # Snowflake Connector for Python
 
-> [!CAUTION]
-> This version of the driver is in public preview and is not ready for use with production data and may be unstable.
-
 This package includes the Snowflake Connector for Python, which conforms to the [Python DB API 2.0](https://www.python.org/dev/peps/pep-0249/) specification.
 
 The Snowflake Connector for Python provides an interface for developing Python
@@ -129,4 +126,4 @@ PYTHON_REFERENCE_DRIVER_VERSION='==4.3.0' hatch run reference:test
 ## References
 
 - [PEP 249 - Python Database API Specification v2.0](https://peps.python.org/pep-0249/)
-- [Python Database API Specification v2.0](https://www.python.org/dev/peps/pep-0249/) 
+- [Python Database API Specification v2.0](https://www.python.org/dev/peps/pep-0249/)

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/hatch_build.py

@@ -125,15 +125,38 @@ class BuildHook(BuildHookInterface):
         build_data["pure_python"] = False
         build_data["infer_tag"] = True
 
+    def _fips_requested(self) -> bool:
+        """Return whether this build should link the FIPS module.
+
+        ``SNOWFLAKE_FIPS`` applies only when the project root is an unpacked
+        sdist (it carries ``PKG-INFO``). A checkout, an editable install, or a
+        wheel build fails when the variable is set.
+        """
+        if os.environ.get("SNOWFLAKE_FIPS", "").lower() not in ("1", "true"):
+            return False
+        if (Path(self.root) / "PKG-INFO").is_file():
+            return True
+        raise RuntimeError(
+            "SNOWFLAKE_FIPS is set, but this build is not an unpacked sdist "
+            "(PKG-INFO is absent). The variable applies only to an sdist install."
+        )
+
     def _select_core_extension(self, build_data: dict[str, Any]) -> None:
         """Force-include only the sf_core_python binary matching this interpreter."""
         ext_name = f"sf_core_python{sysconfig.get_config_var('EXT_SUFFIX')}"
-        core_ext = Path(self.root) / "src" / "snowflake" / "connector" / "_core" / ext_name
+        core_dir = Path(self.root) / "src" / "snowflake" / "connector" / "_core"
+        core_ext = core_dir / ext_name
         if not core_ext.is_file():
             return
-        build_data.setdefault("force_include", {})[str(core_ext)] = (
-            f"snowflake/connector/_core/{ext_name}"
-        )
+        force_include = build_data.setdefault("force_include", {})
+        force_include[str(core_ext)] = f"snowflake/connector/_core/{ext_name}"
+        # macOS and Windows sdist installs link shared aws-lc libraries that
+        # must ship beside the extension. Linux links that module statically.
+        if not self._fips_requested():
+            return
+        for lib in core_dir.iterdir():
+            if lib.is_file() and "aws_lc_fips" in lib.name and lib.suffix in (".dylib", ".so", ".dll"):
+                force_include[str(lib)] = f"snowflake/connector/_core/{lib.name}"
 
     def _generate_protobuf(self) -> None:
         """Generate Python protobuf code using the Rust proto_generator binary."""
@@ -146,8 +169,7 @@ class BuildHook(BuildHookInterface):
 
         if not proto_input.exists():
             raise RuntimeError(
-                f"Proto file not found at {proto_input}. "
-                "Cannot build package without protobuf definitions."
+                f"Proto file not found at {proto_input}. Cannot build package without protobuf definitions."
             )
 
         cargo_manifest = python_dir / "Cargo.toml"
@@ -156,8 +178,7 @@ class BuildHook(BuildHookInterface):
             # Rust toolchain), fall back to previously generated files if they exist.
             if any(protobuf_gen_dir.glob("*_pb2.py")):
                 warnings.warn(
-                    "Cargo.toml not found; skipping protobuf regeneration. "
-                    "Using previously generated protobuf files.",
+                    "Cargo.toml not found; skipping protobuf regeneration. Using previously generated protobuf files.",
                     stacklevel=1,
                 )
                 return
@@ -315,11 +336,13 @@ class BuildHook(BuildHookInterface):
                     # Suppress warnings for vendored/generated C files (Unix only, GCC/Clang flags)
                     if is_unix and src.endswith(vendored_c_files):
                         extra_postargs = list(extra_postargs)
-                        extra_postargs.extend([
-                            "-Wno-unused-variable",
-                            "-Wno-unused-const-variable",
-                            "-Wno-unreachable-code",
-                        ])
+                        extra_postargs.extend(
+                            [
+                                "-Wno-unused-variable",
+                                "-Wno-unused-const-variable",
+                                "-Wno-unreachable-code",
+                            ]
+                        )
                     return original_compile(obj, src, ext_arg, cc_args, extra_postargs, pp_opts)
 
                 self.compiler._compile = new_compile
@@ -344,7 +367,6 @@ class BuildHook(BuildHookInterface):
         Produces a version-tagged ``sf_core_python.<EXT_SUFFIX>`` native
         extension (e.g. ``.cpython-313-darwin.so`` / ``.cp313-win_amd64.pyd``).
         """
-
         if os.environ.get("SKIP_CORE_BUILD", "").lower() in self.POSITIVE_VALUES:
             return
 
@@ -380,9 +402,8 @@ class BuildHook(BuildHookInterface):
         if os.environ.get("SF_PERF_METRICS", "").lower() in ("1", "true"):
             extra_cargo_args.extend(["--features", "sf_core/perf_timing"])
 
-        # Opt-in PyO3-based nanoarrow replacement.
-        if os.environ.get("SF_NATIVE_ARROW", "").lower() in ("1", "true"):
-            extra_cargo_args.extend(["--features", "native-arrow"])
+        if self._fips_requested():
+            extra_cargo_args.extend(["--features", "fips"])
 
         # Use a stable target dir when CORE_CARGO_TARGET_DIR is set (enables
         # incremental Rust compilation and CI caching). Otherwise fall back to a
@@ -465,9 +486,24 @@ class BuildHook(BuildHookInterface):
                 found_core = True
                 break
             if not found_core:
-                raise Exception(
-                    f"No sf_core_python shared library (.dll/.so/.dylib) found in {release_dir}"
-                )
+                raise Exception(f"No sf_core_python shared library (.dll/.so/.dylib) found in {release_dir}")
+
+            # aws-lc-fips-sys emits its shared libraries under release/build/, not
+            # release/. Copy those by name; do not bundle the rest of the tree.
+            copied_fips: set[str] = set()
+            if self._fips_requested():
+                for lib in release_dir.rglob("*"):
+                    if not lib.is_file() or "aws_lc_fips" not in lib.name:
+                        continue
+                    if lib.suffix not in (".dylib", ".so", ".dll") or lib.name in copied_fips:
+                        continue
+                    copied_fips.add(lib.name)
+                    lib_tmp = target_dir / (lib.name + ".tmp")
+                    shutil.copy2(lib, lib_tmp)
+                    os.replace(lib_tmp, target_dir / lib.name)
+            for old in target_dir.iterdir():
+                if old.is_file() and "aws_lc_fips" in old.name and old.name not in copied_fips:
+                    old.unlink()
 
             # No OpenSSL DLLs are bundled next to sf_core_python. The driver
             # stopped linking OpenSSL entirely; `openssl` survives only as an

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/protobuf/database_driver_v1.proto

@@ -37,6 +37,18 @@ enum ErrorKind {
   ERROR_KIND_STAGE_BINDING = 15;
 }
 
+// Distinguishes ERROR_KIND_IO failures that share one kind but different
+// legacy JDBC vendor codes. Unset when kind is not ERROR_KIND_IO, and when
+// an I/O failure has no JDBC vendor code.
+enum IoClass {
+  IO_CLASS_UNSPECIFIED = 0;
+  IO_CLASS_GENERIC = 1;
+  IO_CLASS_NETWORK = 2;
+  IO_CLASS_FILE_UPLOAD = 3;
+  IO_CLASS_FILE_DOWNLOAD = 4;
+  IO_CLASS_NO_SPACE_LEFT = 5;
+}
+
 // Info codes corresponding to Thrift InfoCode enum
 enum InfoCode {
   INFO_CODE_UNSPECIFIED = 0;
@@ -120,6 +132,8 @@ message DriverException {
   // What the abort-request fired on cancellation achieved. Set only when kind is
   // ERROR_KIND_CANCELLED *and* an abort was actually issued; unset otherwise.
   optional CancellationAbortOutcome cancellation_abort_outcome = 13;
+  // Present when kind is ERROR_KIND_IO and the failure has a legacy JDBC vendor code.
+  optional IoClass io_class = 14;
 }
 
 // Column metadata for description
@@ -288,6 +302,7 @@ message WrapperIdentity {
   optional string language_version = 4;
   optional string language_compiler = 5;
   optional string release_type = 6;
+  optional string application_path = 7;
 }
 
 message ConnectionInitRequest {
@@ -1015,6 +1030,15 @@ message ConfigGetPathsResponse {
   string connections_file = 2;
 }
 
+// Reports whether this process is the FIPS driver. Does not open a connection.
+message DriverGetFipsStatusRequest {}
+
+message DriverGetFipsStatusResponse {
+  // True when this binary was built with the fips feature and its linked TLS
+  // provider is in FIPS mode. A standard build returns false.
+  bool is_fips = 1;
+}
+
 // =============================================================================
 // WORKLOAD IDENTITY FEDERATION (WIF) - standalone attestation
 // =============================================================================
@@ -1039,6 +1063,8 @@ message WifCreateAttestationRequest {
   // of the default pre-signed GetCallerIdentity attestation. Takes precedence
   // over SNOWFLAKE_ENABLE_AWS_WIF_OUTBOUND_TOKEN.
   optional bool aws_use_outbound_token = 5;
+  // AWS STS hostname override. Empty/unset uses the regional STS default.
+  optional string wif_host = 6;
 }
 
 message WifCreateAttestationResponse {
@@ -1081,6 +1107,9 @@ message TelemetrySendLogRequest {
 // Database Driver service definition
 service DatabaseDriver {
   option (service_error) = "DriverException";
+  // Available without a database or connection handle, even in standard builds.
+  rpc DriverGetFipsStatus(DriverGetFipsStatusRequest) returns (DriverGetFipsStatusResponse);
+
   // Database operations
   rpc DatabaseNew(DatabaseNewRequest) returns (DatabaseNewResponse);
   rpc DatabaseSetOptions(DatabaseSetOptionsRequest) returns (DatabaseSetOptionsResponse);

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/pyproject.toml

@@ -1,5 +1,5 @@
 [build-system]
-requires = ["hatchling", "editables", "Cython", "setuptools", "mypy-protobuf~=5.0"]
+requires = ["hatchling", "editables", "Cython>=3.1", "setuptools", "mypy-protobuf~=5.0"]
 build-backend = "hatchling.build"
 
 [project]
@@ -20,6 +20,7 @@ classifiers = [
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
     "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: Free Threading :: 2 - Beta",
 ]
 requires-python = ">=3.11"
 dependencies = [
@@ -47,7 +48,7 @@ pyarrow = [
 pandas = [
     "pyarrow>=14.0.1",
     "pandas>=1.0.0,<3.0.0; python_version < '3.13'",
-    "pandas>=2.1.2; python_version >= '3.13'",
+    "pandas>=2.1.2,<3.0.0; python_version >= '3.13'",
 ]
 test = [
     "pytest>=8",
@@ -57,6 +58,7 @@ test = [
     "pytest-xdist",
     "pytest-randomly",
     "pytest-timeout",
+    "pytest-rerunfailures",
     "hypothesis",
     "requests",
     "brotli",
@@ -101,6 +103,7 @@ exclude = [
     "src/snowflake/connector/_internal/nanoarrow_cpp/scripts",
     # Exclude Rust build artifacts
     "sf_core/target/",
+    "sf_core/third_party/rustls-webpki/target/",
     "python_bridge/target/",
     "sf_params_spec/target/",
     "sf_types/target/",
@@ -109,6 +112,9 @@ exclude = [
     "sf_core/tests/e2e/",
     "sf_core/tests/integration/",
     "sf_core/tests/*.rs",
+    # Vendored rustls-webpki unit-test fixtures. The library build does not read them.
+    "sf_core/third_party/rustls-webpki/tests/",
+    "sf_core/third_party/rustls-webpki/third-party/",
 ]
 
 # Individual files need force-include (file symlinks are not dereferenced)
@@ -116,6 +122,7 @@ exclude = [
 "Cargo.toml.sdist" = "Cargo.toml"
 "Cargo.lock.sdist" = "Cargo.lock"
 "../build_common.rs" = "build_common.rs"
+"../rust-toolchain.toml" = "rust-toolchain.toml"
 
 [tool.hatch.build.targets.wheel]
 packages = ["src/snowflake"]
@@ -139,6 +146,8 @@ testpaths = ["tests"]
 python_files = ["test_*.py"]
 python_classes = ["Test*"]
 python_functions = ["test_*"]
+# Dedicated plugin dir only — do not put all of scripts/ on pythonpath (import shadow).
+pythonpath = ["../scripts/pytest_junit_retry_plugin"]
 addopts = [
     "--strict-markers",
     "--strict-config",
@@ -147,6 +156,10 @@ addopts = [
     # minimum 8 workers configured via pytest_xdist_auto_num_workers in conftest.py
     "-n", "auto",
     "--max-worker-restart=4",
+    # Two extra attempts after the first failure (3 total).
+    "--reruns", "2",
+    # Stock junitxml keeps only the last attempt; this plugin writes flakyFailure.
+    "-p", "pytest_junit_retry_plugin",
     # Flaky tests are excluded by default; the python_flaky_tests CI job
     # overrides this with `-m flaky` to run them in isolation.
     "-m", "not flaky and not requires_no_mfa",
@@ -282,7 +295,7 @@ fix = [
 skip-install = false
 dev-mode = true
 dependencies = [
-    "Cython",
+    "Cython>=3.1",
     "setuptools",
 ]
 
@@ -293,13 +306,12 @@ PARAMETER_PATH = "{env:PARAMETER_PATH:../parameters.json}"
 SKIP_CORE_BUILD = "{env:SKIP_CORE_BUILD:1}"
 
 [[tool.hatch.envs.dev.matrix]]
-python = ["3.11", "3.12", "3.13", "3.14"]
+python = ["3.11", "3.12", "3.13", "3.14", "3.14t"]
 
 [tool.hatch.envs.dev.scripts]
-# Unit / integ: on failure, once-rerun last-failed tests (cap at 5 failures)
-# via pytest cache --lf / --maxfail. https://docs.pytest.org/en/stable/how-to/cache.html
-unit = "pytest tests/unit {args} || pytest tests/unit --lf --maxfail=5 {args}"
-integ = "pytest tests/integ {args} || pytest tests/integ --lf --maxfail=5 {args}"
+# Per-test retries come from addopts --reruns 2 (not a second whole-suite run).
+unit = "pytest tests/unit {args}"
+integ = "pytest tests/integ {args}"
 # End-to-end tests
 e2e = "pytest tests/e2e {args}"
 # All tests
@@ -317,14 +329,13 @@ skip-install = true
 dev-mode = false
 
 [[tool.hatch.envs.test.matrix]]
-python = ["3.11", "3.12", "3.13", "3.14"]
+python = ["3.11", "3.12", "3.13", "3.14", "3.14t"]
 
 [tool.hatch.envs.test.scripts]
 # Install from wheel
 install-wheel = "uv pip install {env:WHEEL_PATH:dist/*.whl}"
-# Split suites used by CI (no auto --lf; merge-group last-failed is a separate step).
-# Override the `dev` template scripts: those `|| pytest --lf` wrappers hide
-# failures from GitHub Actions, and `dev:e2e` does not ignore pandas.
+# Split suites used by CI. Override the `dev` template so `dev:e2e` does not
+# ignore pandas. Per-test retries come from addopts --reruns 2.
 unit = "pytest tests/unit {args}"
 integ = "pytest tests/integ {args}"
 e2e = "pytest tests/e2e --ignore=tests/e2e/pandas --ignore=tests/e2e/numpy {args}"
@@ -335,24 +346,15 @@ flaky = "pytest tests/ --ignore=tests/packaging --ignore=tests/e2e/pandas --igno
 # Runs @pytest.mark.requires_no_mfa tests (parameters_aws_local.json).
 no_mfa = "pytest tests/e2e/authentication/test_user_password.py -m requires_no_mfa -n 0 --no-cov {args}"
 
-# Native-arrow overlays python_bridge in install-wheel, then runs :cov.
+# Same unit/integ/e2e split as `test`. The harness sets use_core_arrow.
 [tool.hatch.envs.test-native-arrow]
 template = "test"
-features = ["test", "dev", "pyarrow"]
 
 [[tool.hatch.envs.test-native-arrow.matrix]]
-python = ["3.13"]
+python = ["3.13", "3.14t"]
 
-[tool.hatch.envs.test-native-arrow.scripts]
-# Production wheel, then cargo-test + native-arrow overlay in this env's Python.
-install-wheel = [
-  "uv pip install {env:WHEEL_PATH:dist/*.whl}",
-  "python hatch_native_arrow.py",
-]
-# BOOLEAN, REAL, TEXT, BINARY, NUMBER, DECFLOAT, DATE, TIME, TIMESTAMP_LTZ, VECTOR,
-# DictCursor, and numpy (NUMBER/REAL/DECFLOAT, DATE, TIMESTAMP_NTZ, INTERVAL) are live.
-# Table and insert cases can run because execute_query status rows are NUMBER.
-cov = "pytest tests/unit/test_arrow_stream_utils.py tests/integ/test_cursor.py::TestDictCursorCreation tests/integ/test_cursor.py::TestDictCursorFetchOne tests/integ/test_cursor.py::TestDictCursorFetchMany tests/integ/test_cursor.py::TestDictCursorFetchAll tests/integ/test_cursor.py::TestDictCursorIteration tests/integ/test_cursor.py::TestDictCursorLargeResults tests/integ/test_cursor.py::TestDictCursorMultipleQueries tests/e2e/types/test_boolean.py tests/e2e/types/test_float.py tests/e2e/types/test_string.py tests/e2e/types/test_binary.py tests/e2e/types/test_number.py tests/e2e/types/test_int.py tests/e2e/types/test_decfloat.py tests/e2e/types/test_date.py tests/e2e/types/test_time.py tests/e2e/types/test_timestamp_ltz.py tests/e2e/types/test_vector.py tests/e2e/types/numpy/test_number_numpy.py tests/e2e/types/numpy/test_float_numpy.py tests/e2e/types/numpy/test_decfloat_numpy.py tests/e2e/types/numpy/test_date_numpy.py tests/e2e/types/numpy/test_timestamp_ntz_numpy.py tests/e2e/types/numpy/test_interval_numpy.py --cov=src/snowflake --cov-report=xml --cov-report=html {args}"
+[tool.hatch.envs.test-native-arrow.env-vars]
+SNOWFLAKE_TEST_USE_CORE_ARROW = "1"
 
 # Pandas and NumPy consumer CI test environment
 [tool.hatch.envs.test-pandas]
@@ -360,7 +362,7 @@ template = "test"
 features = ["test", "dev", "pandas"]
 
 [[tool.hatch.envs.test-pandas.matrix]]
-python = ["3.11", "3.12", "3.13", "3.14"]
+python = ["3.11", "3.12", "3.13", "3.14", "3.14t"]
 
 [tool.hatch.envs.test-pandas.scripts]
 cov = "pytest tests/e2e/pandas tests/e2e/numpy --cov=src/snowflake --cov-report=xml --cov-report=html {args}"
@@ -369,7 +371,7 @@ cov = "pytest tests/e2e/pandas tests/e2e/numpy --cov=src/snowflake --cov-report=
 [tool.hatch.envs.packaging]
 features = ["test"]
 installer = "uv"
-extra-dependencies = ["build"]
+extra-dependencies = ["build", "hatchling"]
 
 [[tool.hatch.envs.packaging.matrix]]
 python = ["3.13"]

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/python_bridge/Cargo.toml

@@ -8,15 +8,10 @@ name = "sf_core_python"
 crate-type = ["cdylib", "rlib"]
 
 [features]
-default = ["extension-module"]
+default = ["extension-module", "native-arrow"]
 extension-module = ["pyo3/extension-module"]
 native-arrow = ["dep:arrow", "dep:snafu", "dep:error_trace", "dep:sf_types", "dep:chrono", "pyo3/chrono"]
-# Links the FIPS-mode crypto module (aws-lc-fips-sys) instead of
-# aws-lc-sys. Despite the name it is no longer TLS-only: JWT signing, DPoP,
-# stage file encryption and private-key parsing now run on the same module. The
-# name and the caveat both stand -- see the `fips-tls` feature comment in
-# sf_core/Cargo.toml for why this is still not a FIPS artifact on its own.
-fips-tls = ["sf_core/fips-tls"]
+fips = ["sf_core/fips"]
 
 [dependencies]
 arrow = { version = ">=54.0.0, <59", features = ["ffi"], optional = true }
@@ -35,7 +30,7 @@ futures = "0.3"
 tracing = "0.1.41"
 
 [dev-dependencies]
-# Tests for the native path use --features native-arrow (activates optional arrow).
+# `native-arrow` is a default feature. `--no-default-features` drops it.
 pyo3 = { version = "0.29.0", features = ["auto-initialize"] }
 arrow = { version = ">=54.0.0, <59", features = ["ffi"] }
 tracing-subscriber = { version = "0.3.19", features = ["fmt"] }

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/python_bridge/build.rs

@@ -2,8 +2,11 @@ fn main() {
     // On macOS, Python extension modules leave Python symbols undefined at
     // link time - they are resolved at load time by the interpreter. Without
     // this flag the linker rejects the build with "symbol(s) not found".
+    // FIPS builds also link shared aws-lc libraries whose install name is
+    // `@rpath`, so the extension looks beside itself.
     if std::env::var("CARGO_CFG_TARGET_OS").as_deref() == Ok("macos") {
         println!("cargo:rustc-cdylib-link-arg=-undefined");
         println!("cargo:rustc-cdylib-link-arg=dynamic_lookup");
+        println!("cargo:rustc-cdylib-link-arg=-Wl,-rpath,@loader_path");
     }
 }

{snowflake_connector_python-5.0.0rc4 → snowflake_connector_python-5.1.0}/python_bridge/src/arrow/converters/context.rs

@@ -14,6 +14,7 @@ use super::boolean;
 use super::date;
 use super::decfloat;
 use super::interval;
+use super::map;
 use super::number;
 use super::numpy::NumpyProvider;
 use super::real;
@@ -167,6 +168,7 @@ impl ConversionContext {
                 self.use_numpy,
             ),
             SnowflakeFieldType::Vector { .. } => vector::from_column(array, field_type),
+            SnowflakeFieldType::ArrowMap => map::from_column(self, array),
         }
     }
 }