schemathesis 4.0.22__tar.gz → 4.0.23__tar.gz

{schemathesis-4.0.22 → schemathesis-4.0.23}/CHANGELOG.md

@@ -1,6 +1,12 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.22...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.23...HEAD) - TBD
+
+## [4.0.23](https://github.com/schemathesis/schemathesis/compare/v4.0.22...v4.0.23) - 2025-08-07
+
+### :bug: Fixed
+
+- False positives in `ensure_resource_availability` check by limiting it to 404 responses only.
 
 ## [4.0.22](https://github.com/schemathesis/schemathesis/compare/v4.0.21...v4.0.22) - 2025-08-07
 

{schemathesis-4.0.22 → schemathesis-4.0.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.0.22
+Version: 4.0.23
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md

{schemathesis-4.0.22 → schemathesis-4.0.23}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.0.22"
+version = "4.0.23"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-4.0.22 → schemathesis-4.0.23}/src/schemathesis/specs/openapi/checks.py

@@ -408,8 +408,11 @@ def ensure_resource_availability(ctx: CheckContext, response: Response, case: Ca
     if not isinstance(case.operation.schema, BaseOpenAPISchema) or is_unexpected_http_status_case(case):
         return True
 
-    # First, check if this is a 4XX response
-    if not (400 <= response.status_code < 500):
+    # Only check for 404 (Not Found) responses - other 4XX are not resource availability issues
+    # 422 / 400: Validation errors (bad request data)
+    # 401 / 403: Auth issues (expired tokens, permissions)
+    # 409: Conflict errors
+    if response.status_code != 404:
         return None
 
     parent = ctx._find_parent(case_id=case.id)

schemathesis-4.0.23/test/cli/__snapshots__/test_checks/test_ensure_resource_availability_does_not_trigger_on_subsequent_error.raw

@@ -0,0 +1,43 @@
+Exit code: 0
+---
+Stdout:
+Schemathesis dev
+━━━━━━━━━━━━━━━━
+
+
+ ✅  Loaded specification from http://127.0.0.1/openapi.json (in 0.00s)
+
+     Base URL:         http://127.0.0.1/
+     Specification:    Open API 3.1.0
+     Operations:       2 selected / 2 total
+
+
+ ✅  API capabilities:
+
+     Supports NULL byte in headers:    ✓
+
+ ✅  Stateful (in 0.00s)
+
+     Scenarios:    N
+     API Links:    N covered / 1 selected / 1 total
+
+     ✅ N passed
+
+=================================== SUMMARY ====================================
+
+API Operations:
+  Selected: 2/2
+  Tested: 2
+
+Test Phases:
+  ⏭  Examples (disabled)
+  ⏭  Coverage (disabled)
+  ⏭  Fuzzing (disabled)
+  ✅ Stateful
+
+Test cases:
+  N generated, N passed
+
+Seed: 42
+
+=========================== No issues found in 1.00s ===========================

{schemathesis-4.0.22 → schemathesis-4.0.23}/test/cli/test_checks.py

@@ -243,3 +243,112 @@ def test_not_a_server_error(cli, snapshot_cli, openapi3_schema_url):
         )
         == snapshot_cli
     )
+
+
+def test_ensure_resource_availability_does_not_trigger_on_subsequent_error(app_runner, cli, snapshot_cli):
+    app = Flask(__name__)
+
+    organizations = {}
+    next_id = 1
+
+    @app.route("/openapi.json")
+    def openapi():
+        return {
+            "openapi": "3.1.0",
+            "info": {"title": "Test API", "version": "0.1.0"},
+            "paths": {
+                "/organizations/": {
+                    "post": {
+                        "operationId": "organizations:create",
+                        "requestBody": {
+                            "content": {
+                                "application/json": {
+                                    "schema": {
+                                        "type": "object",
+                                        "properties": {"name": {"type": "string"}},
+                                        "required": ["name"],
+                                    }
+                                }
+                            },
+                            "required": True,
+                        },
+                        "responses": {
+                            "201": {
+                                "description": "Created",
+                                "headers": {"Location": {"schema": {"type": "string"}}},
+                                "links": {
+                                    "create_project": {
+                                        "operationId": "organizations:projects:create",
+                                        "parameters": {
+                                            "organization_id": "$response.body#/id",
+                                        },
+                                    }
+                                },
+                            }
+                        },
+                    }
+                },
+                "/organizations/{organization_id}/projects/": {
+                    "post": {
+                        "operationId": "organizations:projects:create",
+                        "parameters": [
+                            {"name": "organization_id", "in": "path", "required": True, "schema": {"type": "integer"}}
+                        ],
+                        "requestBody": {
+                            "content": {
+                                "application/json": {
+                                    "schema": {
+                                        "type": "object",
+                                        "properties": {"name": {"type": "string"}},
+                                        "required": ["name"],
+                                    }
+                                }
+                            },
+                            "required": True,
+                        },
+                        "responses": {
+                            "201": {"description": "Created"},
+                            "422": {"description": "Unprocessable Content"},
+                        },
+                    }
+                },
+            },
+        }
+
+    @app.route("/organizations/", methods=["POST"])
+    def create_organization():
+        nonlocal next_id
+        data = request.get_json()
+        if not isinstance(data, dict):
+            return jsonify({"error": "Must be object"}), 422
+        if "name" not in data:
+            return jsonify({"error": "Name is missing"}), 422
+
+        organizations[next_id] = data
+        response = jsonify({"id": next_id, "name": data["name"]})
+        next_id += 1
+        return response, 201
+
+    @app.route("/organizations/<int:organization_id>/projects/", methods=["POST"])
+    def create_sub(organization_id):
+        if organization_id not in organizations:
+            return jsonify({"error": "Not found"}), 404
+
+        data = request.get_json()
+        if not isinstance(data, dict):
+            return jsonify({"error": "Must be object"}), 422
+
+        return jsonify({"id": 1}), 201
+
+    port = app_runner.run_flask_app(app)
+
+    assert (
+        cli.run(
+            f"http://127.0.0.1:{port}/openapi.json",
+            "-c ensure_resource_availability",
+            "--max-examples=50",
+            "--phases=stateful",
+            "--continue-on-failure",
+        )
+        == snapshot_cli
+    )