[dependabot]

Work Item / Issue Reference

AB#47861

GitHub Issue: N/A

---

Summary

Upgrade certifi from 2026.7.22 to 2026.10.18 in release dependency locks. Restore complete hash-locked build/test dependencies and universal Python/platform markers, and retain the Windows-specific ODBC dependency closure. Keep unrelated reviewed dependency versions pinned.

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[github-actions]

PR Performance Report

✅ No regression detected

No consistent slowdowns detected across all 2 environments.

0 IMPROVEMENTS 0 SLOWDOWNS 2/2 ENVIRONMENTS

Coverage: 2 of 2 environments completed. Advisory result; does not block merging.

Performance diagnostics

Phase times are inclusive diagnostics and must not be added together. They identify where measured time changed, not why it changed.

No affected phases or call-count changes were recorded.

All database tasks and timings

Unix / SQL Server 2022

Database task	Before	After	Paired change	Result
Connection opening	10.108 ms	10.055 ms	+0.3%	no signal
SELECT queries	0.967 ms	0.964 ms	-1.4%	no signal
Row insertion	30.053 ms	29.914 ms	+0.3%	no signal
Executemany inserts	156.536 ms	155.879 ms	+0.3%	no signal
Fetch-all queries	119.733 ms	117.912 ms	-0.6%	no signal
Row-by-row fetching	4.927 ms	4.973 ms	+1.6%	no signal
Batched row fetching	114.922 ms	115.819 ms	+0.5%	no signal
Transaction commit and rollback	104.155 ms	103.575 ms	-1.3%	no signal
Arrow row fetching	88.750 ms	89.512 ms	+0.9%	no signal
100,000-row insertion	342.381 ms	344.980 ms	+0.8%	no signal
Row fetching in batches of 100	120.570 ms	121.382 ms	+2.1%	no signal
Row fetching in batches of 10,000	123.023 ms	122.468 ms	-0.4%	no signal
Repeated positional queries	31.343 ms	31.425 ms	+0.2%	no signal
Repeated named-parameter queries	31.650 ms	31.840 ms	-0.2%	no signal
Legacy 100,000-row insertion	255.368 ms	253.618 ms	-0.6%	no signal
Insertion with explicit input sizes	374.454 ms	393.307 ms	+5.4%	no signal
Joined aggregation queries	178.883 ms	179.367 ms	+0.4%	no signal
Large joined-result fetching	191.887 ms	184.142 ms	-3.8%	no signal
1.2-million-row fetching	3445.495 ms	3457.618 ms	+0.1%	no signal
Common table expression queries	5.197 ms	5.176 ms	+0.2%	no signal
256 KiB VARCHAR(MAX) / fetchall()	1.470 ms	1.519 ms	+1.3%	no signal
10,000 scalar values / fetchval() (debug disabled)	16.885 ms	16.742 ms	-0.7%	no signal
10,000 output-converted rows / fetchall()	19.738 ms	19.756 ms	-0.0%	no signal
10,000 output-converted rows / fetchmany(1000)	23.074 ms	23.674 ms	+2.9%	no signal
10,000 INT/NVARCHAR rows / fetchmany(1)	24.226 ms	24.492 ms	+1.1%	no signal
10,000 rows x 32 columns / dict(row._mapping) (warm)	32.557 ms	31.173 ms	-1.1%	no signal

Unix / SQL Server 2025

Database task	Before	After	Paired change	Result
Connection opening	82.714 ms	85.120 ms	+0.0%	no signal
SELECT queries	1.028 ms	1.069 ms	+3.2%	no signal
Row insertion	32.037 ms	31.745 ms	-1.8%	no signal
Executemany inserts	156.840 ms	161.729 ms	+2.4%	no signal
Fetch-all queries	123.167 ms	127.085 ms	+3.0%	no signal
Row-by-row fetching	5.106 ms	5.179 ms	+1.9%	no signal
Batched row fetching	119.393 ms	122.643 ms	+0.6%	no signal
Transaction commit and rollback	110.188 ms	110.507 ms	-0.0%	no signal
Arrow row fetching	89.968 ms	94.449 ms	+2.0%	no signal
100,000-row insertion	366.711 ms	359.458 ms	-0.9%	no signal
Row fetching in batches of 100	126.696 ms	127.450 ms	+2.0%	no signal
Row fetching in batches of 10,000	130.885 ms	135.330 ms	+2.4%	no signal
Repeated positional queries	32.441 ms	32.862 ms	+0.3%	no signal
Repeated named-parameter queries	32.620 ms	32.580 ms	-2.4%	no signal
Legacy 100,000-row insertion	260.897 ms	264.117 ms	-0.3%	no signal
Insertion with explicit input sizes	405.032 ms	404.640 ms	+0.2%	no signal
Joined aggregation queries	167.507 ms	178.272 ms	+3.9%	no signal
Large joined-result fetching	205.293 ms	205.909 ms	-2.1%	no signal
1.2-million-row fetching	3663.143 ms	3600.721 ms	-0.4%	no signal
Common table expression queries	5.610 ms	5.379 ms	-1.7%	no signal
256 KiB VARCHAR(MAX) / fetchall()	2.139 ms	2.013 ms	+9.8%	no signal
10,000 scalar values / fetchval() (debug disabled)	17.223 ms	17.602 ms	+0.8%	no signal
10,000 output-converted rows / fetchall()	20.890 ms	20.982 ms	+0.2%	no signal
10,000 output-converted rows / fetchmany(1000)	25.565 ms	25.663 ms	+0.8%	no signal
10,000 INT/NVARCHAR rows / fetchmany(1)	25.526 ms	25.714 ms	-0.0%	no signal
10,000 rows x 32 columns / dict(row._mapping) (warm)	32.759 ms	33.115 ms	-0.6%	no signal

Build and measurement details

ADO build 192016

PR head: d757b3ab3e0318f6387a52b6423b3cbe01b3b0e7
Base: 54237fd6932fe5e198fd7f591bf980d0117b8b77
Measured merge: ec75176e93360b0409af08d50a2409eaa2ce2c1f

• Unix / SQL Server 2022: Python 3.12.3, x86_64, SQL 16.0.4325.4; 5 paired comparisons and 1 warmup.
• Unix / SQL Server 2025: Python 3.12.3, x86_64, SQL 17.0.5065.9; 5 paired comparisons and 1 warmup.

A consistent change requires more than 20% median paired movement, at least 1 ms between the median runtimes, and at least 80% of pairs exceeding the relative threshold in the same direction. A slowdown without enough pair agreement is reported as inconsistent.

The displayed change is the median of paired before-and-after ratios. It is not recalculated from the two displayed median runtimes.

Both revisions use profiling-enabled builds on the same agent and database, with alternating order and discarded warmups. Results are diagnostic and do not represent production-wheel latency.

Raw samples and logs are attached to the ADO run as profiler-* artifacts.

[Copilot]

🔵 Needs a closer look

The regeneration changes dependency coverage beyond certifi, and compatibility across the supported build and test environments has not been established.

No open issues 🎉

What changed in this PR

Updates certifi from 2026.7.22 to 2026.10.19 in three dependency locks used by mssql-python’s build and test pipelines.

Changes:

• Updates certifi pins and SHA-256 hashes.
• Regenerates dependency entries, including platform-specific packages, Python-version conditions, and extras.
• Normalizes generated dependency-source comments.

File	Description
eng/​requirements-test-linux.txt	Updates certifi and regenerates Linux test dependencies.
eng/​requirements-build-odbc.txt	Updates certifi and changes ODBC build dependencies.
eng/​requirements-build-macos.txt	Updates certifi and regenerates macOS build/test dependencies.

_{Review effort: Balanced}

[Copilot]

🟡 Changes recommended

Removing pinned, hashed setuptools and pip entries from the macOS and ODBC build requirements leaves direct setup-script builds dependent on preinstalled tooling, risking failures or unpinned versions.

1 open issue

• Restore pinned setuptools and pip build dependencies · New

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

No active review issues are recorded for the dependency-lock updates.

1 open issue

• Restore pinned setuptools and pip build dependencies

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

The certifi 2026.10.18 artifacts and SHA-256 hashes remain unverified because network access is unavailable, requiring package-index or hash-enforced CI verification.

1 open issue

• Restore pinned setuptools and pip build dependencies

_{Review effort: Balanced}

[github-actions]

📊 Code Coverage Report

🔥 Diff Coverage 100%

🎯 Overall Coverage 86%

📈 Total Lines Covered: 11566 out of 13381 📁 Project: mssql-python

---

Diff Coverage

Diff: main...HEAD, staged and unstaged changes

No lines with coverage information in this diff.

---

📋 Files Needing Attention

📉 Files with overall lowest coverage (click to expand)

mssql_python.pybind.performance_counter.hpp: 0.7%
mssql_python.pybind.logger_bridge.cpp: 57.9%
mssql_python.pybind.ddbc_bindings.h: 64.5%
mssql_python.pybind.logger_bridge.hpp: 70.8%
mssql_python._native_fetch.py: 77.2%
mssql_python.__init__.py: 80.8%
mssql_python.pybind.row_mapping_cache.hpp: 81.5%
mssql_python.pybind.connection.connection_pool.cpp: 82.5%
mssql_python.pybind.ddbc_bindings.cpp: 82.5%
mssql_python.pybind.connection.connection.cpp: 83.1%

---

🔗 Quick Links

⚙️ Build Summary	📋 Coverage Details
View Azure DevOps Build	Browse Full Coverage Report

[Copilot]

🟢 Approval recommended

The certifi dependency-lock update has no active review issues.

1 open issue

• Restore pinned setuptools and pip build dependencies

_{Review effort: Balanced}

[Jahnvi Thakkar (jahnvi480)]

/azp run MSSQL-Python-PR-Validation

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).

[Jahnvi Thakkar (jahnvi480)]

The certifi-only lock update preserves the reviewed dependency closures and target markers. Azure build 191863 passed all 23 jobs, and both exact-head paired Linux SQL Server performance reports validated with no regressions flagged under the existing policy. This is measured profiling-enabled coverage, not a guarantee of zero production latency change.

[Copilot]

🟢 Approval recommended

No active review issues are reported for the certifi dependency-lock update.

No open issues 🎉

1 resolved since last review

• Restore pinned setuptools and pip build dependencies

_{Review effort: Balanced}

[Jahnvi Thakkar (jahnvi480)]

/azp run MSSQL-Python-PR-Validation

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).