Snowddl

Latest version: v0.44.1

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 13 of 21

0.14.0

- Implemented `ALERT` object type.
- Added better error message for missing `text` in YAML config for `VIEW` object type.

0.13.0

- Completely reworked `STAGE` object type resolver. Now it checks actual property values and does not rely on short hash anymore. `STAGE` objects will be re-created only when absolutely necessary. ALTER will be applied for the majority of changes.
- Introduced CLI option `--refresh-stage-encryption` to re-apply encryption parameters for each external `STAGE`. Normally it is not possible to compare config encryption parameters with existing parameters in Snowflake.
- Introduced a few "safe" alters for `TABLE` object type: (1) add new column, (2) change comment on table, (3) change comment on specific column. Previously all alters for `TABLE` were unsafe.
- `ROLE` resolver will no longer try to revoke `OWNERSHIP` grant on objects. This grant can only be transferred.
- `ROLE` resolver will now revoke `WRITE` permission on `STAGES` before trying to revoke `READ` permission.

0.12.3

- Fixed incorrect condition checking `comment` property for `WAREHOUSE` object type, which caused every warehouse to be re-created on every run.
- `FILE_FORMAT` object type is now properly replaced when `type` was changed. Other changes are still applied using `alter file format` command.
- Added tests for `PROCEDURE` and `FILE_FORMAT` object types.

0.12.2

- Fixed incorrect order of parameters when resolving `PROCEDURE` with both `comment` and `is_execute_as_caller`.
- Added protection from `FUNCTION` and `PROCEDURE` arguments with TIMESTAMP-like type and non-default precision. Snowflake bug, case 00444370.

Tests for UDFs and procedures are expected to be added in the next version.

0.12.1

- Fixed a bug with `session_params` being ignored for `USER` object type. Added additional checks to tests.

0.12.0

- (!breaking change!) Object types `NETWORK_POLICY` and `RESOURCE_MONITOR` now use env prefix, similar to other account-level objects. Previously env prefix was ignored for these object types.
- (!breaking change!) Object types `NETWORK_POLICY` and `RESOURCE_MONITOR` are now dropped during `destroy` action as long as `--apply-network-policy` and `--apply-resource-monitor` options are present.
- Added `global_resource_monitor` parameter for `WAREHOUSE` object type. Original `resource_monitor` now refers to monitor defined in config and managed by SnowDDL. New `global_resource_monitor` refers to monitor managed outside SnowDDL.
- User with `ACCOUNTADMIN` privileges is now required to run tests. It is not possible to test `RESOURCE_MONITOR` object type otherwise.
- Fixed a bug with `warehouse_params` not being applied for `WAREHOUSE` object type.
- Fixed a bug with `WAREHOUSE` parameters not being properly updated in specific edge cases.
- Added tests for `WAREHOUSE`, `NETWORK_POLICY`, `RESOURCE_MONITOR` object types.

Page 13 of 21

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.