dbt-core v1.11.14
Updated sqlparse dependency to version 0.6.0 to address multiple parser denial-of-service vulnerabilities (CVE-2026-54284, CVE-2026-59893, CVE-2026-59894, CVE-2026-71491).
dbt-core 1.11.14 - August 20, 2026
Dependencies
- Require
sqlparse>=0.5.5,<0.7.0,sqlparse0.6.0 is the fixed release for CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service). (#15988)
Contributors
Source: original entry ↗
More from dbt
Follow dbt to get its new changes in your feed and email digest.
dbt 2.0.0-dev.41
Added Lake Compute support for reading AWS Databricks Unity Catalog tables with PAT/OAuth M2M credentials. Fixed multiple issues including modules.re keyword argument handling, column-tag diffs in Databricks, and test config inheritance from dbt-core.
BigQuery drivers continue on ADBC.GetObjects errors
Fixed an issue where BigQuery drivers would fail on ADBC.GetObjects 404/403 errors, which was causing incorrect use of REPLACE TABLE instead of MERGE for incremental tables. The drivers now continue gracefully when encountering these errors.