schemathesis 4.0.23__tar.gz → 4.0.24__tar.gz

{schemathesis-4.0.23 → schemathesis-4.0.24}/CHANGELOG.md

@@ -1,6 +1,12 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.23...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.24...HEAD) - TBD
+
+## [4.0.24](https://github.com/schemathesis/schemathesis/compare/v4.0.23...v4.0.24) - 2025-08-09
+
+### :bug: Fixed
+
+- Internal error on incorrect value for `--tls-verify` when the schema URL is accessed via HTTPs. [#3007](https://github.com/schemathesis/schemathesis/issues/3007)
 
 ## [4.0.23](https://github.com/schemathesis/schemathesis/compare/v4.0.22...v4.0.23) - 2025-08-07
 

{schemathesis-4.0.23 → schemathesis-4.0.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.0.23
+Version: 4.0.24
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md

{schemathesis-4.0.23 → schemathesis-4.0.24}/docs/resources.md

@@ -98,6 +98,12 @@ This page collects articles, papers, videos, tutorials, and integrations about S
 
 ## Videos
 
+- [Fuzzing REST APIs for Security Testing](https://youtu.be/ZdshB1qcgvw) by **Alina Kostetska** at **RoboCon 2024**
+
+    - **Description**: Security-focused presentation demonstrating how to use Schemathesis / Robot Framework integration for fuzzing REST APIs to discover vulnerabilities.
+
+    - **Date**: 04 Nov 2024
+
 - [API Fuzzing: What it is and why you should use it](https://youtu.be/wX3GMJY9B6A) by **José Haro Peralta**
 
     - **Description**: Technical overview and demonstration of Schemathesis capabilities.

{schemathesis-4.0.23 → schemathesis-4.0.24}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.0.23"
+version = "4.0.24"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-4.0.23 → schemathesis-4.0.24}/src/schemathesis/core/errors.py

@@ -330,6 +330,7 @@ class LoaderErrorKind(str, enum.Enum):
     CONNECTION_SSL = "connection_ssl"
     CONNECTION_OTHER = "connection_other"
     NETWORK_OTHER = "network_other"
+    INVALID_CERTIFICATE = "invalid_certificate"
 
     # HTTP error codes
     HTTP_SERVER_ERROR = "http_server_error"

{schemathesis-4.0.23 → schemathesis-4.0.24}/src/schemathesis/core/loaders.py

@@ -67,6 +67,9 @@ def make_request(func: Callable[..., requests.Response], url: str, **kwargs: Any
         return raise_for_status(response)
     except requests.RequestException as exc:
         handle_request_error(exc)
+    except OSError as exc:
+        # Possible with certificate errors
+        raise LoaderError(message=str(exc), kind=LoaderErrorKind.INVALID_CERTIFICATE, url=url, extras=[]) from None
 
 
 WAIT_FOR_SCHEMA_INTERVAL = 0.05

schemathesis-4.0.24/test/cli/__snapshots__/test_commands/test_invalid_tls_verify[Open API 3.0].raw

@@ -0,0 +1,12 @@
+Exit code: 1
+---
+Stdout:
+Schemathesis dev
+━━━━━━━━━━━━━━━━
+
+
+ ❌  Failed to load specification from https://127.0.0.1/schema.yaml after 0.00s
+
+ Schema Loading Error
+
+ Could not find a suitable TLS CA certificate bundle, invalid path: falst

{schemathesis-4.0.23 → schemathesis-4.0.24}/test/cli/test_commands.py

@@ -1303,6 +1303,12 @@ def test_rate_limit(cli, schema_url):
     assert cli.run(schema_url, "--rate-limit=1/s").exit_code == ExitCode.OK
 
 
+@pytest.mark.openapi_version("3.0")
+@pytest.mark.operations("failure")
+def test_invalid_tls_verify(cli, schema_url, snapshot_cli):
+    assert cli.run(schema_url.replace("http", "https"), "--tls-verify=falst") == snapshot_cli
+
+
 @pytest.mark.parametrize("version", ["3.0.2", "3.1.0"])
 def test_invalid_schema_with_disabled_validation(
     ctx, cli, openapi_3_schema_with_invalid_security, version, snapshot_cli, openapi3_base_url