marshmallow 4.2.0__tar.gz → 4.2.1__tar.gz

{marshmallow-4.2.0 → marshmallow-4.2.1}/CHANGELOG.rst

@@ -2,6 +2,14 @@ Changelog
 =========
 
 
+4.2.1 (2026-01-23)
+------------------
+
+Bug fixes:
+
+- Fix validation of URLs beginning with uppercare `FILE` (:issue:`2891`).
+  Thanks :user:`thanhlecongg` for reporting and fixing.
+
 4.2.0 (2026-01-04)
 ------------------
 

{marshmallow-4.2.0 → marshmallow-4.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: marshmallow
-Version: 4.2.0
+Version: 4.2.1
 Summary: A lightweight library for converting complex datatypes to and from native Python datatypes.
 Author-email: Steven Loria <oss@stevenloria.com>
 Maintainer-email: Steven Loria <oss@stevenloria.com>, Jérôme Lafréchoux <jerome@jolimont.fr>, Jared Deckard <jared@shademaps.com>

{marshmallow-4.2.0 → marshmallow-4.2.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "marshmallow"
-version = "4.2.0"
+version = "4.2.1"
 description = "A lightweight library for converting complex datatypes to and from native Python datatypes."
 readme = "README.rst"
 license = { file = "LICENSE" }

{marshmallow-4.2.0 → marshmallow-4.2.1}/src/marshmallow/schema.py

@@ -388,7 +388,7 @@ class Schema(metaclass=SchemaMeta):
         load_only: typing.ClassVar[tuple[str, ...] | list[str]]
         """Fields to exclude from serialized results"""
         dump_only: typing.ClassVar[tuple[str, ...] | list[str]]
-        """Fields to exclude from serialized results"""
+        """Fields to exclude from deserialized results"""
         unknown: typing.ClassVar[types.UnknownOption]
         """Whether to exclude, include, or raise an error for unknown fields in the data.
         Use `EXCLUDE`, `INCLUDE` or `RAISE`.

{marshmallow-4.2.0 → marshmallow-4.2.1}/src/marshmallow/validate.py

@@ -214,8 +214,8 @@ class URL(Validator):
 
         # Hostname is optional for file URLS. If absent it means `localhost`.
         # Fill it in for the validation if needed
-        if scheme == "file" and value.startswith("file:///"):
-            matched = regex.search(value.replace("file:///", "file://localhost/", 1))
+        if scheme == "file" and value.lower().startswith("file:///"):
+            matched = regex.search("file://localhost/" + value[8:])
         else:
             matched = regex.search(value)
 

{marshmallow-4.2.0 → marshmallow-4.2.1}/tests/test_validate.py

@@ -224,6 +224,14 @@ def test_url_custom_scheme_case_insensitive():
         "file:///tmp/test%20file.txt",
         "file:///",
         "file://localhost/",
+        "FILE:///tmp/tmp1234",
+        "FILE://localhost/tmp/tmp1234",
+        "FILE:///C:/Users/test/file.txt",
+        "FILE://localhost/C:/Program%20Files/file.exe",
+        "FILE:///home/user/documents/test.pdf",
+        "FILE:///tmp/test%20file.txt",
+        "FILE:///",
+        "FILE://localhost/",
     ),
 )
 def test_url_accepts_valid_file_urls(valid_url):