search

snowflakedb / snowflake-connector-python

Snowflake Connector for Python
https://pypi.python.org/pypi/snowflake-connector-python/
Apache License 2.0
601 stars 473 forks source link

SNOW-1619390: Compatibility with cryptograph=43.0.0 #2020

Closed flowconic closed 3 months ago

flowconic commented 3 months ago

What is the current behavior?

snowflake-connector-python 3.12.0(latest version as of the creation of this issue) depends on cryptography<43.0.0

What is the desired behavior?

snowflake-connector-python 3.12.0 compatible with cryptography=43.0.0

How would this improve snowflake-connector-python?

Use latest patches and improvements and quickly able to address upcoming CVE security vulnerabilities.

References and other background

image

sfc-gh-aling commented 3 months ago

thanks for reaching out!

I have a PR out to unpin cryptography: https://github.com/snowflakedb/snowflake-connector-python/pull/2021

flowconic commented 3 months ago

thanks for reaching out!

I have a PR out to unpin cryptography: #2021

Amazing, thank you for jumping on this so quickly.

sfc-gh-aling commented 3 months ago

we have released v3.12.1 which unpins the cryptography dependency, please take a try!

flowconic commented 3 months ago

we have released v3.12.1 which unpins the cryptography dependency, please take a try!

Thank you so much. We will do this week. Really appreciate the quick resolution.

irikeish commented 1 month ago

@sfc-gh-aling Could you please update the release note about cryptography dependency? Thanks.