Node.js Driver release notes for 2025¶

Private Preview (PrPr) features¶

• Implemented support for Programmatic Access Tokens authentication.

Disclaimer:

• These features can only be accessed by setting SF_ENABLE_EXPERIMENTAL_AUTHENTICATION environment variable to true.

• You should use these features only with non-production data.

• These PrPr features are not covered by Support. However, the Product and Engineering teams are available during the PrPr phase.

• Please contact your account team for participation and documentation.

New features and updates¶

• Upgraded axios to version 1.8.2+.

Bug fixes¶

• Fixed a Time-of-check Time-of-use (TOCTOU) race condition when checking access to the Easy Logging configuration file. For more information, see CVE-2025-46328 (https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-wmjq-jrm2-9wfr).

• Fixed OCSP response cache entries not being refreshed properly.

New features and updates¶

• None

Bug fixes¶

• Fixed an issue with promise rejection for file upload errors.

New features and updates¶

• Added support for regional Google Cloud Storage endpoints.

• Added support for endpoints without protocols for GCS.

• Updated the following dependencies:

  • azure/storage-blob to version 12.26.x,

  • aws-sdk/client-s3 to version 3.726.0,

  • smithy/node-http-handler to version 4.0.1

Bug fixes¶

• Fixed the verification of the token caching file permissions and its owner when authentication is set to EXTERNALBROWSER or USERNAME_PASSWORD_MFA. For more information, see CVE-2025-24791 (https://github.com/snowflakedb/snowflake-connector-nodejs/security/advisories/GHSA-xfhv-wqj6-rx99).

• Fixed the FileAndStageBindStatement type in the typings file.

• Fixed an issue with aborting requests and inconsistent request methods in HttpClient.

• Fixed an issue with the proxy configuration settings used for sending requests to a GCS bucket.