Releasesby GlyphSnowflake Native Apps: Code execution tools for Cortex Agents
Providers can now add the code_execution and code_toolset_all sandbox tools to Cortex Agents created by a Snowflake Native App.
Also shipped Sep 1, 2026Snowflake in September 2026 →
Fivetran connection cron scheduling enters beta
Connections can now use one or more cron expressions to control exactly when they sync, giving finer control than fixed sync frequencies.
Fivetran Connection Warnings REST API enters private preview
New endpoints retrieve active warnings for a connection, grouped by destination table with codes, messages and timestamps, and dismiss all instances of a warning type, enabling programmatic warning management.
Apache Arrow support for Zerobus Ingest is now generally available
Apache Arrow support for Zerobus Ingest in Lakeflow Connect is now generally available. See Use Arrow Flight with Zerobus Ingest .
Genie One web search is in Beta
Genie One can now search the public web to answer questions that need current information, such as recent release notes, third-party documentation, or news. Genie One cites the external sources it uses as links in its response. See Search the web .
Genie Code scheduled tasks are now generally available
Genie Code scheduled tasks are now generally available. You can schedule Genie Code to run a prompt on a recurring schedule. Each run executes your prompt as a full Genie Code session and produces a continuable Genie chat with the results, so you can turn recurring analysis and other work into an unattended background task.
More from Snowflake Cortex AIEvery Snowflake Cortex AI release →
Data lineage for Cortex Agents
You can now use data lineage to see which data a Cortex Agent can reach through the tools declared in its specification. A semantic view that a Cortex Analyst tool references, and a Cortex Search service that a Cortex Search tool references, both appear upstream of the agent.
Restricted Session Scope for agents (General availability)
With this release, Restricted Session Scope (RSS) is generally available. An RSS is a privilege ceiling that limits what an agent can do on behalf of a user. It intersects with RBAC and never grants privileges the user doesn't already have through their roles.
Cortex Agents asynchronous API (General availability)
The Cortex Agents asynchronous API is now generally available on AWS and Microsoft Azure.
Snowflake recommends transitioning from Cortex Analyst to Cortex Agents
Snowflake recommends transitioning to Cortex Agents , which supports every Cortex Analyst capability with higher answer quality. Snowflake adds new natural language analytics capabilities to Cortex Agents.
Cortex Extension references in agent skills (General availability)
Referencing a Cortex Extension from an agent skill is now generally available. Set the skill source type to CORTEX_EXTENSION and path to the extension's fully qualified name, and Snowflake expands the reference into the extension's member skills at request time, so you don't list each skill individually.
Cortex Agents Coding Agent (General availability)
The Cortex Agents Coding Agent is now generally available. Add the code_toolset_all tool type to a Cortex Agent, and Snowflake provisions and manages a sandbox backed by the same runtime that powers Snowflake CoCo: bash, file read/write/edit, grep, glob, web search, SQL execution, and skills.
Version targeting for Cortex Agent and Cortex Analyst evaluations (General availability)
Cortex Agent and Cortex Analyst evaluations now let you control the versioned configuration used for scoring: Version targeting pins the configuration under evaluation, not the agent behavior that gets evaluated: each run invokes the agent again and scores a newly generated trace.
AI_EXTRACT and AI_PARSE_DOCUMENT support for client-side encrypted stages and network-restricted accounts (General availability)
AI_EXTRACT and AI_PARSE_DOCUMENT now support documents stored on stages that use client-side or server-side encryption, including in accounts that use PrivateLink or other network policies that restrict public network access to stages. For more information, see the following topics: