2.3.0 - 2026-07-29#

Summary#

This release adds support for Python 3.14 and fixes vulnerabilities by updating transitive dependencies in the poetry.lock file.

Dependency

Version

ID

Fix Versions

Updated to

black

25.12.0

CVE-2026-32274

26.3.1

26.3.1

cryptography

46.0.5

CVE-2026-34073

46.0.6

46.0.6

pygments

2.19.2

CVE-2026-4539

2.20

2.20

requests

2.32.5

CVE-2026-25645

2.33.0

2.33.0

tornado

6.5.4

GHSA-78cv-mqj4-43f7

6.5.5

6.5.5

tornado

6.5.4

CVE-2026-31958

6.5.5

6.5.5

To ensure usage of secure packages, it is up to the user to similarly relock their dependencies.

Refactoring#

  • #288: Updated to exasol-toolbox 7.0.0, regenerated workflows and updated .workflow-patcher.yml

  • #304: Split on-prem and SaaS integration tests into separate workflows.

  • #305: Fixed the extensions of uploaded files in integration tests to comply with SaaS rules.

  • #298: Updated exasol-toolbox to 10.0.0

Security Issues#

  • #284: Fixed vulnerabilities by re-locking transitive dependencies & updated:

    • actions/download-artifact from v7 to v8

    • actions/upload-artifact from v6 to v7

Dependencies#

  • #312: Added support for Python 3.14