schemathesis 3.38.8__tar.gz → 3.38.9__tar.gz

{schemathesis-3.38.8 → schemathesis-3.38.9}/.github/workflows/build.yml

@@ -80,7 +80,7 @@ jobs:
         run: uvx --with="tox" --with="tox-gh-actions" --with="tox-uv" tox
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4.6.0
+        uses: codecov/codecov-action@v5.0.7
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 

{schemathesis-3.38.8 → schemathesis-3.38.9}/.pre-commit-config.yaml

@@ -38,12 +38,12 @@ repos:
         additional_dependencies: [types-click, types-requests, types-PyYAML]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.0
+    rev: v0.8.1
     hooks:
       - id: ruff-format
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.8.0
+    rev: v0.8.1
     hooks:
       - id: ruff
 

{schemathesis-3.38.8 → schemathesis-3.38.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: schemathesis
-Version: 3.38.8
+Version: 3.38.9
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://schemathesis.readthedocs.io/en/stable/changelog.html

{schemathesis-3.38.8 → schemathesis-3.38.9}/docs/changelog.rst

@@ -1,9 +1,19 @@
 Changelog
 =========
 
-:version:`Unreleased <v3.38.8...HEAD>` - TBD
+:version:`Unreleased <v3.38.9...HEAD>` - TBD
 --------------------------------------------
 
+.. _v3.38.9:
+
+:version:`3.38.9 <v3.38.8...v3.38.9>` - 2024-12-02
+--------------------------------------------------
+
+**Fixed**
+
+- ``UnicodeEncodeError`` when sending a request during the coverage phase.
+- Duplicated test cases for missing required headers during the coverage phase.
+
 .. _v3.38.8:
 
 :version:`3.38.8 <v3.38.7...v3.38.8>` - 2024-11-28

{schemathesis-3.38.8 → schemathesis-3.38.9}/docs/service.rst

@@ -36,6 +36,14 @@ This can be done by using the ``--report`` flag with your CLI commands.
 
 To store a report for later upload, you can first save it using the ``--report=report.tar.gz`` CLI option. Afterward, you can upload it with the ``st upload report.tar.gz`` command.
 
+.. note::
+
+    If the ``--report`` flag is not passed, or if its argument points to a local file, no data is sent to external services. Reports generated locally are fully self-contained and remain on your machine unless you explicitly upload them to Schemathesis.io using the upload command.
+
+    The content of the report includes all HTTP calls made during the test execution, providing transparency into the exact interactions Schemathesis performed.
+
+    This data helps improve the product's quality and usability by identifying edge cases, such as incompatible server behavior, but is only accessible to Schemathesis.io when the report is uploaded.
+
 What Data is Sent?
 ------------------
 

{schemathesis-3.38.8 → schemathesis-3.38.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "3.38.8"
+version = "3.38.9"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-3.38.8 → schemathesis-3.38.9}/src/schemathesis/_hypothesis.py

@@ -462,7 +462,10 @@ def _iter_coverage_cases(
                 )
                 if DataGenerationMethod.negative in data_generation_methods:
                     subschema = _combination_schema(combo, required, parameter_set)
-                    yield from _yield_negative(subschema, location, container_name)
+                    for case in _yield_negative(subschema, location, container_name):
+                        # Already generated in one of the blocks above
+                        if location != "path" and not case.meta.description.startswith("Missing required property"):
+                            yield case
 
         # 3. Generate one combination for each size from 2 to N-1 of optional parameters
         if len(optional) > 1 and DataGenerationMethod.positive in data_generation_methods:

{schemathesis-3.38.8 → schemathesis-3.38.9}/src/schemathesis/generation/coverage.py

@@ -760,7 +760,7 @@ def _negative_enum(
     ctx: CoverageContext, value: list, seen: set[Any | tuple[type, str]]
 ) -> Generator[GeneratedValue, None, None]:
     def is_not_in_value(x: Any) -> bool:
-        if x in value:
+        if x in value or not ctx.is_valid_for_location(x):
             return False
         _hashed = _to_hashable_key(x)
         return _hashed not in seen
@@ -829,9 +829,9 @@ def _negative_pattern(
         return
     yield NegativeValue(
         ctx.generate_from(
-            st.text(min_size=min_length or 0, max_size=max_length).filter(
-                partial(_not_matching_pattern, pattern=compiled)
-            )
+            st.text(min_size=min_length or 0, max_size=max_length)
+            .filter(partial(_not_matching_pattern, pattern=compiled))
+            .filter(ctx.is_valid_for_location)
         ),
         description=f"Value not matching the '{pattern}' pattern",
         location=ctx.current_path,

{schemathesis-3.38.8 → schemathesis-3.38.9}/test/coverage/test_phase.py

@@ -1031,6 +1031,47 @@ def test_incorrect_headers(ctx):
     )
 
 
+def test_incorrect_headers_with_enum(ctx):
+    schema = ctx.openapi.build_schema(
+        {
+            "/foo": {
+                "post": {
+                    "parameters": [
+                        {
+                            "name": "X-API-Key-1",
+                            "in": "header",
+                            "required": True,
+                            "schema": {"enum": ["foo"]},
+                        },
+                    ],
+                    "responses": {"200": {"description": "OK"}},
+                }
+            }
+        }
+    )
+    assert_coverage(
+        schema,
+        [DataGenerationMethod.negative],
+        [
+            {
+                "headers": {},
+            },
+            {
+                "headers": {"X-API-Key-1": "{}"},
+            },
+            {
+                "headers": {"X-API-Key-1": "null,null"},
+            },
+            {
+                "headers": {"X-API-Key-1": "false"},
+            },
+            {
+                "headers": {"X-API-Key-1": "0"},
+            },
+        ],
+    )
+
+
 def test_negative_query_parameter(ctx):
     schema = ctx.openapi.build_schema(
         {
@@ -1124,6 +1165,44 @@ def test_unspecified_http_methods(ctx):
     assert methods == {"HEAD", "PATCH", "TRACE", "DELETE", "OPTIONS", "PUT"}
 
 
+def test_no_missing_header_duplication(ctx):
+    schema = ctx.openapi.build_schema(
+        {
+            "/foo": {
+                "post": {
+                    "parameters": [
+                        {"name": "X-Key-1", "in": "header", "required": False, "schema": {"type": "string"}},
+                        {"name": "X-Key-2", "in": "header", "required": False, "schema": {"type": "string"}},
+                        {"name": "X-Key-3", "in": "header", "required": True, "schema": {"type": "string"}},
+                    ],
+                    "responses": {"default": {"description": "OK"}},
+                }
+            }
+        }
+    )
+    schema = schemathesis.from_dict(schema, validate_schema=True)
+
+    descriptions = []
+    operation = schema["/foo"]["post"]
+
+    def test(case):
+        if case.meta.phase != TestPhase.COVERAGE:
+            return
+        descriptions.append(case.meta.description)
+
+    test_func = create_test(
+        operation=operation,
+        test=test,
+        data_generation_methods=DataGenerationMethod.all(),
+        settings=settings(phases=[Phase.explicit]),
+    )
+
+    test_func()
+
+    assert "Missing required property: X-Key-3" not in descriptions
+    assert "Missing `X-Key-3` at header" in descriptions
+
+
 def assert_coverage(schema, methods, expected, path=None):
     schema = schemathesis.from_dict(schema, validate_schema=True)