Fix1.12.3Aug 21, 2026

dbt-core v1.12.3

Fixed artifact uploads to Azure Blob Storage by sending the correct BlockBlob header and accepting 201 Created responses, preventing 400 MissingRequiredHeader failures. Updated sqlparse dependency to 0.6.0 to address four critical parser denial-of-service vulnerabilities.

dbt-core 1.12.3 - August 20, 2026

Fixes

Send the x-ms-blob-type: BlockBlob header and accept 201 Created when uploading artifacts to an Azure Blob Storage signed URL, so artifact ingestion no longer fails with 400 MissingRequiredHeader on Azure-hosted regions. Upload errors now include the storage provider's error code alongside the status code. (#N/A)

Dependencies

Require sqlparse>=0.5.5,<0.7.0, sqlparse 0.6.0 is the fixed release for CVE-2026-54284, CVE-2026-59893, CVE-2026-59894 and CVE-2026-71491 (parser denial-of-service). (#15988)

Contributors

@tauhid621 (#N/A)
@ulixius9 (#15988)

azurestoragesecuritydependenciesbug-fix

Source: original entry ↗