schemathesis 3.39.0__tar.gz → 3.39.1__tar.gz

{schemathesis-3.39.0 → schemathesis-3.39.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 3.39.0
+Version: 3.39.1
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://schemathesis.readthedocs.io/en/stable/changelog.html

{schemathesis-3.39.0 → schemathesis-3.39.1}/docs/changelog.rst

@@ -1,23 +1,33 @@
 Changelog
 =========
 
-:version:`Unreleased <v3.39.0...HEAD>` - TBD
+:version:`Unreleased <v3.39.1...HEAD>` - TBD
 --------------------------------------------
 
+.. _v3.39.1:
+
+:version:`3.39.1 <v3.39.0...v3.39.1>` - 2024-12-17
+--------------------------------------------------
+
+**Fixed**
+
+- False positive in the ``ensure_resource_availability`` check.
+- XML serialization no longer produces duplicate attributes.
+
 .. _v3.39.0:
 
 :version:`3.39.0 <v3.38.10...v3.39.0>` - 2024-12-16
 ---------------------------------------------------
 
-**Added**:
+**Added**
 
 - ``--experimental-no-failfast`` CLI option to make Schemathesis continue testing an API operation after a failure is found.
 
-**Fixed**:
+**Fixed**
 
 - Avoid writing unbounded prefixes in XML serialization.
 
-**Changed**:
+**Changed**
 
 - Escape XML entities instead of rejecting invalid ones.
 

{schemathesis-3.39.0 → schemathesis-3.39.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "3.39.0"
+version = "3.39.1"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-3.39.0 → schemathesis-3.39.1}/src/schemathesis/_xml.py

@@ -92,7 +92,7 @@ def _write_object(
         _write_namespace(buffer, options)
 
     attribute_namespaces = {}
-    attributes = []
+    attributes = {}
     children_buffer = StringIO()
     properties = (schema or {}).get("properties", {})
     for child_name, value in obj.items():
@@ -110,7 +110,9 @@ def _write_object(
                 attribute_namespaces[prefix] = child_options["namespace"]
             else:
                 attr_name = _sanitize_xml_name(child_tag)
-            attributes.append(f'{attr_name}="{_escape_xml(value)}"')
+
+            if attr_name not in attributes:  # Only keep first occurrence
+                attributes[attr_name] = f'{attr_name}="{_escape_xml(value)}"'
             continue
 
         child_tag = _sanitize_xml_name(child_tag)
@@ -126,7 +128,7 @@ def _write_object(
         buffer.write(f' xmlns:{prefix}="{namespace}"')
 
     if attributes:
-        buffer.write(f" {' '.join(attributes)}")
+        buffer.write(f" {' '.join(attributes.values())}")
     buffer.write(">")
     buffer.write(children_buffer.getvalue())
     buffer.write(f"</{tag}>")

{schemathesis-3.39.0 → schemathesis-3.39.1}/src/schemathesis/specs/openapi/checks.py

@@ -366,6 +366,10 @@ def ensure_resource_availability(ctx: CheckContext, response: GenericResponse, o
         and original.source.case.operation.method.upper() == "POST"
         and 200 <= original.source.response.status_code < 400
         and original.source.overrides_all_parameters
+        and _is_prefix_operation(
+            ResourcePath(original.source.case.path, original.source.case.path_parameters or {}),
+            ResourcePath(original.path, original.path_parameters or {}),
+        )
     ):
         created_with = original.source.case.operation.verbose_name
         not_available_with = original.operation.verbose_name

{schemathesis-3.39.0 → schemathesis-3.39.1}/test/specs/openapi/stateful/conftest.py

@@ -265,10 +265,15 @@ def app_factory(ctx):
             return jsonify({"message": "User deleted successfully"}), 204
         return jsonify({"error": "User not found"}), 404
 
+    deleted_orders = set()
+
     @app.route("/orders/<order_id>", methods=["DELETE"])
     def delete_order(order_id):
         if config.slowdown:
             time.sleep(config.slowdown)
+        if order_id in deleted_orders:
+            return jsonify({"error": "Order not found"}), 404
+        deleted_orders.add(order_id)
         return jsonify({"message": "Nothing happened"}), 200
 
     @app.before_request

{schemathesis-3.39.0 → schemathesis-3.39.1}/test/test_serialization.py

@@ -484,3 +484,41 @@ def test_xml_with_binary(ctx):
         assert case.as_transport_kwargs()["data"] == ""
 
     test()
+
+
+def test_duplicate_xml_attributes(ctx):
+    schema = ctx.openapi.build_schema(
+        {
+            "/test": {
+                "post": {
+                    "requestBody": {
+                        "content": {
+                            "application/xml": {
+                                "schema": {
+                                    "type": "object",
+                                    "properties": {
+                                        "prop1": {
+                                            "type": "integer",
+                                            "xml": {"namespace": "foo", "name": "attr", "attribute": True},
+                                        },
+                                        "prop2": {
+                                            "type": "integer",
+                                            "xml": {"namespace": "foo", "name": "attr", "attribute": True},
+                                        },
+                                    },
+                                }
+                            }
+                        },
+                        "required": True,
+                    },
+                    "responses": {"200": {"description": "OK"}},
+                }
+            }
+        }
+    )
+
+    schema = schemathesis.from_dict(schema)
+    case = schema["/test"]["POST"].make_case(body={"prop1": 1, "prop2": 2})
+
+    serialized_data = case.as_transport_kwargs()["data"].decode("utf8")
+    ElementTree.fromstring(serialized_data)