Skip to content

chore(deps-dev): bump schemathesis from 4.16.1 to 4.24.3 in /clients/python - #3029

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/clients/python/schemathesis-4.24.3
Open

chore(deps-dev): bump schemathesis from 4.16.1 to 4.24.3 in /clients/python#3029
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/clients/python/schemathesis-4.24.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps schemathesis from 4.16.1 to 4.24.3.

Release notes

Sourced from schemathesis's releases.

Release 4.24.3

🏎️ Performance

  • Faster strategy construction for string, integer, and anyOf schemas.

🔧 Changed

  • INTERNAL: Data generation for string, integer, and anyOf schemas built from the jsonschema-rs canonical form.

Release 4.24.2

🐛 Fixed

  • positive_data_acceptance hint counting properties declared under allOf/anyOf/oneOf as undocumented.
  • Fuzz dictionaries and body overrides not applied to fields behind $ref. #4350
  • config.*.update() ignoring invalid values and resetting flags it was not given.

Release 4.24.1

🐛 Fixed

  • Fuzz dictionaries not applied to body fields nested under oneOf/anyOf/allOf or if/then/else. #4347

🔧 Changed

  • INTERNAL: Canonicalization for enum, const, and bare type schemas moved to jsonschema-rs.

Release 4.24.0

🚀 Added

  • Dynamic token authentication support for OAuth2 and OpenID Connect security schemes.
  • Reactive auth refresh: refetch the token and replay a request on configured statuses (auth.dynamic.openapi.<scheme>.retry-on, @schemathesis.auth(retry_on=[401])).

🐛 Fixed

  • Report dynamic authentication token-fetch failures without duplicated text or an internal traceback.
  • Explain 401/403 responses from a dynamic authentication token endpoint as rejected credentials.
  • Crash dictionary changed size during iteration with multiple workers under free-threaded Python.
  • Crash on schemas embedding a JSON Schema resource that declares its own $schema dialect.
  • False positive positive_data_acceptance for required array query parameters generated as empty.
  • False positive negative_data_rejection for body schemas with additionalProperties: false. #4332
  • Generation error for request bodies with prefixItems in OpenAPI 3.1 schemas.
  • Crash Cannot sample from a length-zero sequence for array items with an empty enum.
  • False positive positive_data_acceptance for array items with enum entries violating the item schema.
  • Undercounted stateful link totals for schemas sharing a response definition across operations.
  • Operations with unresolvable $refs silently skipped when dependency ordering applies.
  • False missing_deserializer warning for media types whose own schema is unstructured.
  • Skip reasons in the summary borrowed from operations that were tested in another phase.

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.24.3 - 2026-07-26

🏎️ Performance

  • Faster strategy construction for string, integer, and anyOf schemas.

🔧 Changed

  • INTERNAL: Data generation for string, integer, and anyOf schemas built from the jsonschema-rs canonical form.

4.24.2 - 2026-07-22

🐛 Fixed

  • positive_data_acceptance hint counting properties declared under allOf/anyOf/oneOf as undocumented.
  • Fuzz dictionaries and body overrides not applied to fields behind $ref. #4350
  • config.*.update() ignoring invalid values and resetting flags it was not given.

4.24.1 - 2026-07-21

🐛 Fixed

  • Fuzz dictionaries not applied to body fields nested under oneOf/anyOf/allOf or if/then/else. #4347

🔧 Changed

  • INTERNAL: Canonicalization for enum, const, and bare type schemas moved to jsonschema-rs.

4.24.0 - 2026-07-19

🚀 Added

  • Dynamic token authentication support for OAuth2 and OpenID Connect security schemes.
  • Reactive auth refresh: refetch the token and replay a request on configured statuses (auth.dynamic.openapi.<scheme>.retry-on, @schemathesis.auth(retry_on=[401])).

🐛 Fixed

  • Report dynamic authentication token-fetch failures without duplicated text or an internal traceback.
  • Explain 401/403 responses from a dynamic authentication token endpoint as rejected credentials.
  • Crash dictionary changed size during iteration with multiple workers under free-threaded Python.
  • Crash on schemas embedding a JSON Schema resource that declares its own $schema dialect.
  • False positive positive_data_acceptance for required array query parameters generated as empty.
  • False positive negative_data_rejection for body schemas with additionalProperties: false. #4332
  • Generation error for request bodies with prefixItems in OpenAPI 3.1 schemas.
  • Crash Cannot sample from a length-zero sequence for array items with an empty enum.
  • False positive positive_data_acceptance for array items with enum entries violating the item schema.
  • Undercounted stateful link totals for schemas sharing a response definition across operations.
  • Operations with unresolvable $refs silently skipped when dependency ordering applies.
  • Dependent operations tested before the operations they depend on finish when running with multiple workers.
  • False missing_deserializer warning for media types whose own schema is unstructured.

... (truncated)

Commits
  • 613ce31 chore: Release 4.24.3
  • 3fed283 chore: Update jsonschema-rs to 0.49.0
  • 9573cca build(deps): bump docker/login-action from 4.4.0 to 4.5.0
  • b2ec7f9 build(deps): bump github/codeql-action/init from 4.37.1 to 4.37.3
  • 7ceb392 build(deps): bump astral-sh/setup-uv from 8.3.2 to 9.0.0
  • 36172bc build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1
  • 7273f3e build(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.3
  • 2bcfb5c perf: Faster strategy construction for string, integer, and anyOf schemas
  • fa40f60 test: Strenghten tests checking for Hypothesis notes in stdout
  • 793da18 chore: Release 4.24.2
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 27, 2026
@google-oss-prow
google-oss-prow Bot requested review from chambridge and fege July 27, 2026 12:48
@dependabot
dependabot Bot force-pushed the dependabot/pip/clients/python/schemathesis-4.24.3 branch from 4434b4b to 6e8372e Compare August 3, 2026 15:48
@google-oss-prow

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from al-pragliola. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dependabot
dependabot Bot force-pushed the dependabot/pip/clients/python/schemathesis-4.24.3 branch from 6e8372e to 9413d3e Compare August 11, 2026 14:12
@jonburdo

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/pip/clients/python/schemathesis-4.24.3 branch from 9413d3e to f08a8bd Compare August 17, 2026 20:34
Bumps [schemathesis](https://github.com/schemathesis/schemathesis) from 4.16.1 to 4.24.3.
- [Release notes](https://github.com/schemathesis/schemathesis/releases)
- [Changelog](https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md)
- [Commits](schemathesis/schemathesis@v4.16.1...v4.24.3)

---
updated-dependencies:
- dependency-name: schemathesis
  dependency-version: 4.24.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/clients/python/schemathesis-4.24.3 branch from f08a8bd to 41c7492 Compare August 17, 2026 20:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area/MR Python client dependencies Pull requests that update a dependency file python Pull requests that update Python code size/L

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants