Skip to content

Upgrade snowflake-sdk to 3.4.0 and clean up dependency overrides - #268

Merged
bigorn0 merged 2 commits into
developfrom
upgrade/snowflake-sdk-3.4.0
Oct 8, 2026
Merged

bigorn0 merged 2 commits into
developfrom
upgrade/snowflake-sdk-3.4.0

Conversation

@bigorn0

@bigorn0 bigorn0 commented Oct 8, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Upgrade snowflake-sdk from 2.3.5 to 3.4.0 to resolve transitive dependency vulnerabilities
  • Port the existing Hackolade patch to patches/snowflake-sdk+3.4.0.patch (axios fetch adapter, proxy agent bypass, minicore disabled for bundling)
  • Remove dependency overrides that are no longer required (axios, fast-xml-parser, moment, toml, @tootallnate/once, minimatch, brace-expansion); keep only the uuid override

bigorn0 and others added 2 commits October 8, 2026 11:35
Update the SDK to fix transitive vulnerabilities, port the Hackolade
fetch/minicore patch to 3.4.0, and drop overrides that are no longer
needed now that the upgraded SDK resolves secure dependency versions.

Co-authored-by: Cursor <cursoragent@cursor.com>
Remove upstream TODO/NOTE comments and dead minicore loader code that
are no longer relevant once minicore is disabled and getAgent is stubbed.

Co-authored-by: Cursor <cursoragent@cursor.com>
@bigorn0
bigorn0 enabled auto-merge (squash) October 8, 2026 10:04
@sonarqubecloud

sonarqubecloud Bot commented Oct 8, 2026

Copy link
Copy Markdown

@bigorn0
bigorn0 merged commit c8f114f into develop Oct 8, 2026
@bigorn0
bigorn0 deleted the upgrade/snowflake-sdk-3.4.0 branch October 8, 2026 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant