OIDC federated authentication (Public Preview)
OpenID Connect (OIDC) security integrations for federated single sign-on (SSO) are available in Public Preview. Multiple OIDC integrations, or OIDC alongside an existing SAML2 integration, require identifier-first login . Without identifier-first login, only one SSO integration (SAML2 or OIDC) can be ENABLED=TRUE at a time.
Also shipped Jul 20, 2026Snowflake in July 2026 →
Lakehouse : Cross-cloud Lakehouse now supports integration with SAP Business Data Cloud (BDC) in Preview
Lakehouse : Cross-cloud Lakehouse now supports integration with SAP Business Data Cloud (BDC) in Preview. This update includes the following features: Federation from SAP BDC: Create Delta Sharing catalogs in Lakehouse to automatically synchronize shares, schemas, and tables from SAP BDC.
[In preview] Public Preview: Protect sensitive generative AI telemetry in Application Insights and Microsoft Foundry
Azure Monitor Application Insights now stores generative AI content in a dedicated GenAIContent table (AppGenAIContent in Log Analytics), making it possible to apply newly available access controls to sensitive AI telemetry. Because Application Insights p
AI credit pools for cost centers in the billing UI
You can now manage a cost center’s AI credit pool directly in the billing UI where you create and edit cost centers. Previously, you could only manage this through the GitHub REST API. This feature is available for Copilot Business and Copilot Enterprise on GitHub Enterprise Cloud. Toggle the AI credit pool on when you create or edit a cost center.
Copilot users can now see AI credits used per billing cycle
Copilot Business and Copilot Enterprise users can now see how many AI credits they’ve used this billing cycle, even without an individual budget. Find this on your GitHub Copilot usage page in your GitHub settings. Previously, the page showed usage only as a percentage of a budget.
GitHub Code Quality is now generally available
GitHub Code Quality is now generally available on GitHub Enterprise Cloud and GitHub Team. It solves an emerging challenge for software development: AI accelerates code output, and Code Quality helps teams ship code they trust.
Configure where run state lives in Vercel Workflows
Vercel Workflows now keeps each run's state, queue dispatch, and output streams in a single home region: the region where the run starts by default, or any target region you choose.
More from SnowflakeEvery Snowflake release →
Built-in network rules for additional Microsoft applications
Snowflake now maintains built-in network rules for five additional Microsoft partner applications: Built-in network rules define the set of allowed IP addresses that a frequently used, third-party partner application uses to connect with Snowflake.
DML into frozen regions of dynamic tables (General availability)
You can now use DML statements (INSERT, UPDATE, MERGE, DELETE) to modify rows directly in the frozen region of a dynamic table. This enables use cases such as GDPR-required row deletions or correcting specific records without triggering a full refresh of the active region. For more information, see DML into a frozen region .
Pass-through policies for dynamic tables with incremental refresh (General availability)
Dynamic tables that have base tables with arbitrary masking or row access policies can now maintain incremental refresh when the policy is pass-through for the role used during refresh (that is, when the refresh role has unrestricted access to all rows and columns regardless of the policy condition).
Improved Google Cloud Storage query performance for credential-vended Iceberg tables
You can now set the VENDED_CREDENTIAL_STORAGE_REGION parameter on Google Cloud Storage-backed externally managed Iceberg tables that use catalog-vended credentials. Setting this parameter to your Google Cloud Storage bucket’s region can significantly improve query latency.
External OAuth and configurable scopes for MCP servers (General availability)
Two new hierarchical parameters let you bind MCP servers to your organization’s existing identity provider (IdP) and control which OAuth scopes MCP clients discover. This enables MCP clients such as Claude, Cursor, and ChatGPT to authenticate against your corporate IdP instead of Snowflake OAuth.
Refresh multiple dynamic tables in one ALTER statement
You can now refresh multiple dynamic tables in a single ALTER DYNAMIC TABLE ... REFRESH statement by supplying a comma-separated list of table names. Snowflake merges the upstream dependencies of every listed dynamic table into one pipeline and refreshes all of them at a single data timestamp. Shared upstreams refresh exactly once.
SQL environment variable and private Git package support for dbt Projects on Snowflake
Environment variable support for dbt Projects on Snowflake is now generally available. Manage per-developer schemas, dynamic runtime values, secrets, and multiple environments in a single, Git-versioned env.yml file that Snowflake resolves before each run.
Snowflake Data Clean Rooms updates
Clean room UI users: New updates are applied to the UI automatically when a user starts a new session after a new update is deployed. To ensure new updates are applied, make sure to log out and log back into the UI. Clean room API users: API updates are applied either manually or automatically to an account. Learn how to manage updates for Data Clean Rooms.