schemathesis 4.0.1__tar.gz → 4.0.3__tar.gz

{schemathesis-4.0.1 → schemathesis-4.0.3}/.github/workflows/codeql-analysis.yml

@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3.28.19
+        uses: github/codeql-action/init@v3.29.0
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -49,7 +49,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3.28.19
+        uses: github/codeql-action/autobuild@v3.29.0
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -63,4 +63,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3.28.19
+        uses: github/codeql-action/analyze@v3.29.0

{schemathesis-4.0.1 → schemathesis-4.0.3}/.github/workflows/example-build.yml

@@ -23,7 +23,7 @@ jobs:
         working-directory: "./examples/booking"
 
       # Runs positive Schemathesis tests
-      - uses: schemathesis/action@v1
+      - uses: schemathesis/action@v2
         continue-on-error: true
         with:
           # A local API schema location

{schemathesis-4.0.1 → schemathesis-4.0.3}/.pre-commit-config.yaml

@@ -25,7 +25,7 @@ repos:
       - id: yamllint
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.16.0
+    rev: v1.16.1
     hooks:
       - id: mypy
         exclude: ^(docs/|test/|test-corpus/|example/|benches/).*$
@@ -33,11 +33,11 @@ repos:
         additional_dependencies: [types-requests, types-PyYAML]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.11.13
+    rev: v0.12.1
     hooks:
       - id: ruff-format
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.11.13
+    rev: v0.12.1
     hooks:
       - id: ruff-check

{schemathesis-4.0.1 → schemathesis-4.0.3}/CHANGELOG.md

@@ -1,6 +1,23 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.1...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.3...HEAD) - TBD
+
+## [4.0.3](https://github.com/schemathesis/schemathesis/compare/v4.0.2...v4.0.3) - 2025-06-30
+
+### :wrench: Changed
+
+- **Pytest**: Cleaner error reporting for Schema-related errors (like unknown media type).
+
+### :bug: Fixed
+
+- **Pytest**: Issue where enabling or disabling checks via the config file had no effect.
+- **Pytest**: Ignored `tls-verify`, `request-timeout`, `request-cert`, and `request-cert-key` options supplied via the config file.
+
+## [4.0.2](https://github.com/schemathesis/schemathesis/compare/v4.0.1...v4.0.2) - 2025-06-15
+
+### :bug: Fixed
+
+- Don't send explicitly passed headers for the `missing_required_header` check. [#2898](https://github.com/schemathesis/schemathesis/issues/2898)
 
 ## [4.0.1](https://github.com/schemathesis/schemathesis/compare/v4.0.0...v4.0.1) - 2025-06-13
 

{schemathesis-4.0.1 → schemathesis-4.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.0.1
+Version: 4.0.3
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md
@@ -170,7 +170,7 @@ def test_api(case):
 
 **CI/CD:**
 ```yaml
-- uses: schemathesis/action@v1
+- uses: schemathesis/action@v2
   with:
     schema: "https://your-api.com/openapi.json"
 ```

{schemathesis-4.0.1 → schemathesis-4.0.3}/README.md

@@ -73,7 +73,7 @@ def test_api(case):
 
 **CI/CD:**
 ```yaml
-- uses: schemathesis/action@v1
+- uses: schemathesis/action@v2
   with:
     schema: "https://your-api.com/openapi.json"
 ```

{schemathesis-4.0.1 → schemathesis-4.0.3}/SECURITY.md

@@ -2,12 +2,12 @@
 
 ## Supported Versions
 
-Schemathesis provides security updates only for the latest minor version within the 3.x series.
+Schemathesis provides security updates only for the latest minor version within the 4.x series.
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 3.x     | :white_check_mark: |
-| < 3.0   | :x:                |
+| 4.x     | :white_check_mark: |
+| < 4.0   | :x:                |
 
 ## Reporting a Vulnerability
 

{schemathesis-4.0.1 → schemathesis-4.0.3}/docs/guides/cicd.md

@@ -35,7 +35,7 @@ jobs:
       - name: Start services
         run: docker compose up -d
         
-      - uses: schemathesis/action@v1
+      - uses: schemathesis/action@v2
         with:
           schema: 'http://localhost:8080/openapi.json'
           args: >-

{schemathesis-4.0.1 → schemathesis-4.0.3}/mkdocs.yml

@@ -26,7 +26,7 @@ nav:
       - Hypothesis Strategies: guides/hypothesis-strategies.md
       - guides/targeted.md
 
-  - Core Contcepts:
+  - Core Concepts:
       - explanations/data-generation.md
       - explanations/examples.md
       - explanations/stateful.md

{schemathesis-4.0.1 → schemathesis-4.0.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.0.1"
+version = "4.0.3"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/cli/commands/run/handlers/cassettes.py

@@ -4,7 +4,7 @@ import datetime
 import json
 import sys
 import threading
-from dataclasses import dataclass, field
+from dataclasses import dataclass
 from http.cookies import SimpleCookie
 from pathlib import Path
 from queue import Queue
@@ -35,10 +35,23 @@ class CassetteWriter(EventHandler):
     format: ReportFormat
     path: Path
     config: ProjectConfig
-    queue: Queue = field(default_factory=Queue)
-    worker: threading.Thread = field(init=False)
+    queue: Queue
+    worker: threading.Thread
+
+    __slots__ = ("format", "path", "config", "queue", "worker")
+
+    def __init__(
+        self,
+        format: ReportFormat,
+        path: Path,
+        config: ProjectConfig,
+        queue: Queue | None = None,
+    ) -> None:
+        self.format = format
+        self.path = path
+        self.config = config
+        self.queue = queue or Queue()
 
-    def __post_init__(self) -> None:
         kwargs = {
             "path": self.path,
             "config": self.config,
@@ -49,7 +62,12 @@ class CassetteWriter(EventHandler):
             writer = har_writer
         else:
             writer = vcr_writer
-        self.worker = threading.Thread(name="SchemathesisCassetteWriter", target=writer, kwargs=kwargs)
+
+        self.worker = threading.Thread(
+            name="SchemathesisCassetteWriter",
+            target=writer,
+            kwargs=kwargs,
+        )
         self.worker.start()
 
     def start(self, ctx: ExecutionContext) -> None:

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/cli/commands/run/handlers/junitxml.py

@@ -1,7 +1,7 @@
 from __future__ import annotations
 
 import platform
-from dataclasses import dataclass, field
+from dataclasses import dataclass
 from pathlib import Path
 from typing import Iterable
 
@@ -16,7 +16,13 @@ from schemathesis.engine import Status, events
 @dataclass
 class JunitXMLHandler(EventHandler):
     path: Path
-    test_cases: dict = field(default_factory=dict)
+    test_cases: dict
+
+    __slots__ = ("path", "test_cases")
+
+    def __init__(self, path: Path, test_cases: dict | None = None) -> None:
+        self.path = path
+        self.test_cases = test_cases or {}
 
     def handle_event(self, ctx: ExecutionContext, event: events.EngineEvent) -> None:
         if isinstance(event, events.ScenarioFinished):

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/cli/commands/run/handlers/output.py

@@ -324,10 +324,21 @@ class ProbingProgressManager:
 
 @dataclass
 class WarningData:
-    missing_auth: dict[int, set[str]] = field(default_factory=dict)
-    missing_test_data: set[str] = field(default_factory=set)
-    # operations that only returned 4xx
-    validation_mismatch: set[str] = field(default_factory=set)
+    missing_auth: dict[int, set[str]]
+    missing_test_data: set[str]
+    validation_mismatch: set[str]
+
+    __slots__ = ("missing_auth", "missing_test_data", "validation_mismatch")
+
+    def __init__(
+        self,
+        missing_auth: dict[int, set[str]] | None = None,
+        missing_test_data: set[str] | None = None,
+        validation_mismatch: set[str] | None = None,
+    ) -> None:
+        self.missing_auth = missing_auth or {}
+        self.missing_test_data = missing_test_data or set()
+        self.validation_mismatch = validation_mismatch or set()
 
     @property
     def is_empty(self) -> bool:

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/core/__init__.py

@@ -28,6 +28,8 @@ class Specification:
     kind: SpecificationKind
     version: str
 
+    __slots__ = ("kind", "version")
+
     @classmethod
     def openapi(cls, version: str) -> Specification:
         return cls(kind=SpecificationKind.OPENAPI, version=version)

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/engine/control.py

@@ -12,8 +12,16 @@ class ExecutionControl:
 
     stop_event: threading.Event
     max_failures: int | None
-    _failures_counter: int = 0
-    has_reached_the_failure_limit: bool = False
+    _failures_counter: int
+    has_reached_the_failure_limit: bool
+
+    __slots__ = ("stop_event", "max_failures", "_failures_counter", "has_reached_the_failure_limit")
+
+    def __init__(self, stop_event: threading.Event, max_failures: int | None) -> None:
+        self.stop_event = stop_event
+        self.max_failures = max_failures
+        self._failures_counter = 0
+        self.has_reached_the_failure_limit = False
 
     @property
     def is_stopped(self) -> bool:

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/engine/core.py

@@ -18,6 +18,8 @@ from .phases import Phase, PhaseName, PhaseSkipReason
 class Engine:
     schema: BaseSchema
 
+    __slots__ = ("schema",)
+
     def execute(self) -> EventStream:
         """Execute all test phases."""
         # Unregister auth if explicitly provided
@@ -103,6 +105,8 @@ class ExecutionPlan:
 
     phases: Sequence[Phase]
 
+    __slots__ = ("phases",)
+
     def execute(self, engine: EngineContext) -> EventGenerator:
         """Execute all phases in sequence."""
         yield events.EngineStarted()
@@ -150,6 +154,8 @@ class EventStream:
     generator: EventGenerator
     stop_event: threading.Event
 
+    __slots__ = ("generator", "stop_event")
+
     def __next__(self) -> events.EngineEvent:
         return next(self.generator)
 

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/engine/phases/__init__.py

@@ -60,8 +60,18 @@ class Phase:
 
     name: PhaseName
     is_supported: bool
-    is_enabled: bool = True
-    skip_reason: PhaseSkipReason | None = None
+    is_enabled: bool
+    skip_reason: PhaseSkipReason | None
+
+    __slots__ = ("name", "is_supported", "is_enabled", "skip_reason")
+
+    def __init__(
+        self, name: PhaseName, is_supported: bool, is_enabled: bool = True, skip_reason: PhaseSkipReason | None = None
+    ) -> None:
+        self.name = name
+        self.is_supported = is_supported
+        self.is_enabled = is_enabled
+        self.skip_reason = skip_reason
 
     def should_execute(self, ctx: EngineContext) -> bool:
         """Determine if phase should run based on context & configuration."""

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/engine/phases/probes.py

@@ -68,6 +68,8 @@ class Probe:
 
     name: str
 
+    __slots__ = ("name",)
+
     def prepare_request(
         self, session: requests.Session, request: requests.Request, schema: BaseSchema
     ) -> requests.PreparedRequest:
@@ -92,9 +94,25 @@ class ProbeOutcome(str, enum.Enum):
 class ProbeRun:
     probe: Probe
     outcome: ProbeOutcome
-    request: requests.PreparedRequest | None = None
-    response: requests.Response | None = None
-    error: Exception | None = None
+    request: requests.PreparedRequest | None
+    response: requests.Response | None
+    error: Exception | None
+
+    __slots__ = ("probe", "outcome", "request", "response", "error")
+
+    def __init__(
+        self,
+        probe: Probe,
+        outcome: ProbeOutcome,
+        request: requests.PreparedRequest | None = None,
+        response: requests.Response | None = None,
+        error: Exception | None = None,
+    ) -> None:
+        self.probe = probe
+        self.outcome = outcome
+        self.request = request
+        self.response = response
+        self.error = error
 
     @property
     def is_failure(self) -> bool:
@@ -105,7 +123,10 @@ class ProbeRun:
 class NullByteInHeader(Probe):
     """Support NULL bytes in headers."""
 
-    name: str = "Supports NULL byte in headers"
+    __slots__ = ("name",)
+
+    def __init__(self) -> None:
+        self.name = "Supports NULL byte in headers"
 
     def prepare_request(
         self, session: requests.Session, request: requests.Request, schema: BaseSchema

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/generation/case.py

@@ -244,19 +244,25 @@ class Case:
 
         response = Response.from_any(response)
 
+        config = self.operation.schema.config.checks_config_for(
+            operation=self.operation, phase=self.meta.phase.name.value if self.meta is not None else None
+        )
+        if not checks:
+            # Checks are not specified explicitly, derive from the config
+            checks = []
+            for check in CHECKS.get_all():
+                name = check.__name__
+                if config.get_by_name(name=name).enabled:
+                    checks.append(check)
         checks = [
-            check
-            for check in list(checks or CHECKS.get_all()) + list(additional_checks or [])
-            if check not in set(excluded_checks or [])
+            check for check in list(checks) + list(additional_checks or []) if check not in set(excluded_checks or [])
         ]
 
         ctx = CheckContext(
             override=self._override,
             auth=None,
             headers=CaseInsensitiveDict(headers) if headers else None,
-            config=self.operation.schema.config.checks_config_for(
-                operation=self.operation, phase=self.meta.phase.name.value if self.meta is not None else None
-            ),
+            config=config,
             transport_kwargs=transport_kwargs,
             recorder=None,
         )

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/generation/hypothesis/builder.py

@@ -1,7 +1,7 @@
 from __future__ import annotations
 
 import asyncio
-from dataclasses import dataclass, field
+from dataclasses import dataclass
 from enum import Enum
 from functools import wraps
 from itertools import combinations
@@ -53,11 +53,39 @@ class HypothesisTestMode(str, Enum):
 class HypothesisTestConfig:
     project: ProjectConfig
     modes: list[HypothesisTestMode]
-    settings: hypothesis.settings | None = None
-    seed: int | None = None
-    as_strategy_kwargs: dict[str, Any] = field(default_factory=dict)
-    given_args: tuple[GivenInput, ...] = ()
-    given_kwargs: dict[str, GivenInput] = field(default_factory=dict)
+    settings: hypothesis.settings | None
+    seed: int | None
+    as_strategy_kwargs: dict[str, Any]
+    given_args: tuple[GivenInput, ...]
+    given_kwargs: dict[str, GivenInput]
+
+    __slots__ = (
+        "project",
+        "modes",
+        "settings",
+        "seed",
+        "as_strategy_kwargs",
+        "given_args",
+        "given_kwargs",
+    )
+
+    def __init__(
+        self,
+        project: ProjectConfig,
+        modes: list[HypothesisTestMode],
+        settings: hypothesis.settings | None = None,
+        seed: int | None = None,
+        as_strategy_kwargs: dict[str, Any] | None = None,
+        given_args: tuple[GivenInput, ...] = (),
+        given_kwargs: dict[str, GivenInput] | None = None,
+    ) -> None:
+        self.project = project
+        self.modes = modes
+        self.settings = settings
+        self.seed = seed
+        self.as_strategy_kwargs = as_strategy_kwargs or {}
+        self.given_args = given_args
+        self.given_kwargs = given_kwargs or {}
 
 
 def create_test(
@@ -393,6 +421,7 @@ class Template:
 class TemplateValue:
     kwargs: dict[str, Any]
     components: dict[ComponentKind, ComponentInfo]
+
     __slots__ = ("kwargs", "components")
 
 

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/generation/meta.py

@@ -37,11 +37,15 @@ class ComponentInfo:
 class GeneratePhaseData:
     """Metadata specific to generate phase."""
 
+    __slots__ = ()
+
 
 @dataclass
 class ExplicitPhaseData:
     """Metadata specific to explicit phase."""
 
+    __slots__ = ()
+
 
 @dataclass
 class CoveragePhaseData:

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/generation/overrides.py

@@ -22,6 +22,8 @@ class Override:
     cookies: dict[str, str]
     path_parameters: dict[str, str]
 
+    __slots__ = ("query", "headers", "cookies", "path_parameters")
+
     def items(self) -> Iterator[tuple[str, dict[str, str]]]:
         for key, value in (
             ("query", self.query),

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/hooks.py

@@ -32,6 +32,8 @@ class RegisteredHook:
     signature: inspect.Signature
     scopes: list[HookScope]
 
+    __slots__ = ("signature", "scopes")
+
     def _repr_pretty_(self, *args: Any, **kwargs: Any) -> None: ...
 
 

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/pytest/lazy.py

@@ -1,7 +1,7 @@
 from __future__ import annotations
 
 from contextlib import nullcontext
-from dataclasses import dataclass, field
+from dataclasses import dataclass
 from inspect import signature
 from typing import TYPE_CHECKING, Any, Callable, Generator, Type
 
@@ -71,7 +71,17 @@ def get_all_tests(
 @dataclass
 class LazySchema:
     fixture_name: str
-    filter_set: FilterSet = field(default_factory=FilterSet)
+    filter_set: FilterSet
+
+    __slots__ = ("fixture_name", "filter_set")
+
+    def __init__(
+        self,
+        fixture_name: str,
+        filter_set: FilterSet | None = None,
+    ) -> None:
+        self.fixture_name = fixture_name
+        self.filter_set = filter_set or FilterSet()
 
     def include(
         self,

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/pytest/plugin.py

@@ -20,6 +20,7 @@ from schemathesis.core.errors import (
     InvalidHeadersExample,
     InvalidRegexPattern,
     InvalidSchema,
+    SchemathesisError,
     SerializationNotPossible,
     format_exception,
 )
@@ -263,20 +264,27 @@ def pytest_pycollect_makeitem(collector: nodes.Collector, name: str, obj: Any) -
 
 @pytest.hookimpl(tryfirst=True)  # type: ignore[misc]
 def pytest_exception_interact(node: Function, call: pytest.CallInfo, report: pytest.TestReport) -> None:
-    if call.excinfo and call.excinfo.type is FailureGroup:
-        tb_entries = list(call.excinfo.traceback)
-        total_frames = len(tb_entries)
-
-        # Keep internal Schemathesis frames + one extra one from the caller
-        skip_frames = 0
-        for i in range(total_frames - 1, -1, -1):
-            entry = tb_entries[i]
-
-            if not str(entry.path).endswith("schemathesis/generation/case.py"):
-                skip_frames = i
-                break
-
-        report.longrepr = "".join(format_exception(call.excinfo.value, with_traceback=True, skip_frames=skip_frames))
+    if call.excinfo:
+        if issubclass(call.excinfo.type, SchemathesisError) and hasattr(call.excinfo.value, "__notes__"):
+            # Hypothesis adds quite a lot of additional debug information which is not that helpful in Schemathesis
+            call.excinfo.value.__notes__.clear()
+            report.longrepr = "".join(format_exception(call.excinfo.value))
+        if call.excinfo.type is FailureGroup:
+            tb_entries = list(call.excinfo.traceback)
+            total_frames = len(tb_entries)
+
+            # Keep internal Schemathesis frames + one extra one from the caller
+            skip_frames = 0
+            for i in range(total_frames - 1, -1, -1):
+                entry = tb_entries[i]
+
+                if not str(entry.path).endswith("schemathesis/generation/case.py"):
+                    skip_frames = i
+                    break
+
+            report.longrepr = "".join(
+                format_exception(call.excinfo.value, with_traceback=True, skip_frames=skip_frames)
+            )
 
 
 @hookimpl(wrapper=True)

{schemathesis-4.0.1 → schemathesis-4.0.3}/src/schemathesis/schemas.py

@@ -50,9 +50,6 @@ if TYPE_CHECKING:
     from schemathesis.generation.stateful.state_machine import APIStateMachine
 
 
-C = TypeVar("C", bound=Case)
-
-
 @lru_cache
 def get_full_path(base_path: str, path: str) -> str:
     return unquote(urljoin(base_path, quote(path.lstrip("/"))))
@@ -483,6 +480,8 @@ class APIOperationMap(Mapping):
     _schema: BaseSchema
     _data: Mapping
 
+    __slots__ = ("_schema", "_data")
+
     def __getitem__(self, item: str) -> APIOperation:
         return self._data[item]
 
@@ -526,6 +525,8 @@ class Parameter:
     # The parameter definition in the language acceptable by the API
     definition: Any
 
+    __slots__ = ("definition",)
+
     @property
     def location(self) -> str:
         """Where this parameter is located.
@@ -556,7 +557,12 @@ P = TypeVar("P", bound=Parameter)
 class ParameterSet(Generic[P]):
     """A set of parameters for the same location."""
 
-    items: list[P] = field(default_factory=list)
+    items: list[P]
+
+    __slots__ = ("items",)
+
+    def __init__(self, items: list[P] | None = None) -> None:
+        self.items = items or []
 
     def _repr_pretty_(self, *args: Any, **kwargs: Any) -> None: ...