dbt-core v1.12.3
Fixed artifact uploads to Azure Blob Storage by sending the correct BlockBlob header and accepting 201 Created responses, preventing 400 MissingRequiredHeader failures. Updated sqlparse dependency to 0.6.0 to address four critical parser denial-of-service vulnerabilities.
dbt-core 1.12.3 - August 20, 2026
Fixes
- Send the
x-ms-blob-type: BlockBlobheader and accept201 Createdwhen uploading artifacts to an Azure Blob Storage signed URL, so artifact ingestion no longer fails with400 MissingRequiredHeaderon Azure-hosted regions. Upload errors now include the storage provider's error code alongside the status code. (#N/A)
Dependencies
- Require
sqlparse>=0.5.5,<0.7.0,sqlparse0.6.0 is the fixed release for CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service). (#15988)
Contributors
Source: original entry ↗
More from dbt
Follow dbt to get its new changes in your feed and email digest.
dbt 2.0.0-dev.41
Added Lake Compute support for reading AWS Databricks Unity Catalog tables with PAT/OAuth M2M credentials. Fixed multiple issues including modules.re keyword argument handling, column-tag diffs in Databricks, and test config inheritance from dbt-core.
BigQuery drivers continue on ADBC.GetObjects errors
Fixed an issue where BigQuery drivers would fail on ADBC.GetObjects 404/403 errors, which was causing incorrect use of REPLACE TABLE instead of MERGE for incremental tables. The drivers now continue gracefully when encountering these errors.