v1.12.3
dbt-core v1.12.3
Fixed 2
- Send the x-ms-blob-type: BlockBlob header and accept 201 Created when uploading artifacts to an Azure Blob Storage signed URL so artifact ingestion no longer fails with 400 MissingRequiredHeader on Azure-hosted regions
- Include the storage provider's error code alongside the status code in upload errors
Security 1
- Require sqlparse>=0.5.5,<0.7.0 to fix CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 parser denial-of-service vulnerabilities
From dbt Core
dbt-core 1.12.3 - August 20, 2026
Fixes
- Send the
x-ms-blob-type: BlockBlobheader and accept201 Createdwhen uploading artifacts to an Azure Blob Storage signed URL, so artifact ingestion no longer fails with400 MissingRequiredHeaderon Azure-hosted regions. Upload errors now include the storage provider's error code alongside the status code. (#N/A)
Dependencies
- Require
sqlparse>=0.5.5,<0.7.0,sqlparse0.6.0 is the fixed release for CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service). (#15988)