Commit Graph
3 Commits
Author SHA1 Message Date
utkarsh240799andClaude Opus 4.6 5355a226a6 fix: remove unused StatementParameterListItem import in tests
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 19:14:21 +05:30
utkarsh240799andClaude Opus 4.6 1eb6bd8303 fix: ensure Databricks SQL compatibility for parameterized queries
- Add explicit type='TIMESTAMP' on StatementParameterListItem for
  created_at/updated_at columns instead of relying on implicit
  STRING->TIMESTAMP casting
- Fix pre-existing bug: update() used Python list repr [0.1, 0.2]
  for embedding which is invalid Databricks SQL, now uses
  _format_sql_value() to produce array(0.1, 0.2) syntax

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 19:11:13 +05:30
utkarsh240799andClaude Opus 4.6 c6cc8f14b8 fix: prevent SQL injection in Databricks vector store (#4073)
Replace f-string interpolation with Databricks parameterized queries
using StatementParameterListItem in delete(), update(), and insert()
methods. Add column name validation in update() to reject invalid SQL
identifiers from payload keys. Embedding vectors remain inlined as
they are numeric arrays not supported by the parameterization API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-26 19:03:10 +05:30