schemathesis 4.0.2__tar.gz → 4.0.3__tar.gz

{schemathesis-4.0.2 → schemathesis-4.0.3}/.github/workflows/codeql-analysis.yml

@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3.28.19
+        uses: github/codeql-action/init@v3.29.0
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -49,7 +49,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3.28.19
+        uses: github/codeql-action/autobuild@v3.29.0
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -63,4 +63,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3.28.19
+        uses: github/codeql-action/analyze@v3.29.0

{schemathesis-4.0.2 → schemathesis-4.0.3}/.github/workflows/example-build.yml

@@ -23,7 +23,7 @@ jobs:
         working-directory: "./examples/booking"
 
       # Runs positive Schemathesis tests
-      - uses: schemathesis/action@v1
+      - uses: schemathesis/action@v2
         continue-on-error: true
         with:
           # A local API schema location

{schemathesis-4.0.2 → schemathesis-4.0.3}/.pre-commit-config.yaml

@@ -25,7 +25,7 @@ repos:
       - id: yamllint
 
   - repo: https://github.com/pre-commit/mirrors-mypy
-    rev: v1.16.0
+    rev: v1.16.1
     hooks:
       - id: mypy
         exclude: ^(docs/|test/|test-corpus/|example/|benches/).*$
@@ -33,11 +33,11 @@ repos:
         additional_dependencies: [types-requests, types-PyYAML]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.11.13
+    rev: v0.12.1
     hooks:
       - id: ruff-format
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.11.13
+    rev: v0.12.1
     hooks:
       - id: ruff-check

{schemathesis-4.0.2 → schemathesis-4.0.3}/CHANGELOG.md

@@ -1,6 +1,17 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.2...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.0.3...HEAD) - TBD
+
+## [4.0.3](https://github.com/schemathesis/schemathesis/compare/v4.0.2...v4.0.3) - 2025-06-30
+
+### :wrench: Changed
+
+- **Pytest**: Cleaner error reporting for Schema-related errors (like unknown media type).
+
+### :bug: Fixed
+
+- **Pytest**: Issue where enabling or disabling checks via the config file had no effect.
+- **Pytest**: Ignored `tls-verify`, `request-timeout`, `request-cert`, and `request-cert-key` options supplied via the config file.
 
 ## [4.0.2](https://github.com/schemathesis/schemathesis/compare/v4.0.1...v4.0.2) - 2025-06-15
 

{schemathesis-4.0.2 → schemathesis-4.0.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.0.2
+Version: 4.0.3
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md

{schemathesis-4.0.2 → schemathesis-4.0.3}/SECURITY.md

@@ -2,12 +2,12 @@
 
 ## Supported Versions
 
-Schemathesis provides security updates only for the latest minor version within the 3.x series.
+Schemathesis provides security updates only for the latest minor version within the 4.x series.
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 3.x     | :white_check_mark: |
-| < 3.0   | :x:                |
+| 4.x     | :white_check_mark: |
+| < 4.0   | :x:                |
 
 ## Reporting a Vulnerability
 

{schemathesis-4.0.2 → schemathesis-4.0.3}/mkdocs.yml

@@ -26,7 +26,7 @@ nav:
       - Hypothesis Strategies: guides/hypothesis-strategies.md
       - guides/targeted.md
 
-  - Core Contcepts:
+  - Core Concepts:
       - explanations/data-generation.md
       - explanations/examples.md
       - explanations/stateful.md

{schemathesis-4.0.2 → schemathesis-4.0.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.0.2"
+version = "4.0.3"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-4.0.2 → schemathesis-4.0.3}/src/schemathesis/generation/case.py

@@ -244,19 +244,25 @@ class Case:
 
         response = Response.from_any(response)
 
+        config = self.operation.schema.config.checks_config_for(
+            operation=self.operation, phase=self.meta.phase.name.value if self.meta is not None else None
+        )
+        if not checks:
+            # Checks are not specified explicitly, derive from the config
+            checks = []
+            for check in CHECKS.get_all():
+                name = check.__name__
+                if config.get_by_name(name=name).enabled:
+                    checks.append(check)
         checks = [
-            check
-            for check in list(checks or CHECKS.get_all()) + list(additional_checks or [])
-            if check not in set(excluded_checks or [])
+            check for check in list(checks) + list(additional_checks or []) if check not in set(excluded_checks or [])
         ]
 
         ctx = CheckContext(
             override=self._override,
             auth=None,
             headers=CaseInsensitiveDict(headers) if headers else None,
-            config=self.operation.schema.config.checks_config_for(
-                operation=self.operation, phase=self.meta.phase.name.value if self.meta is not None else None
-            ),
+            config=config,
             transport_kwargs=transport_kwargs,
             recorder=None,
         )

{schemathesis-4.0.2 → schemathesis-4.0.3}/src/schemathesis/pytest/plugin.py

@@ -20,6 +20,7 @@ from schemathesis.core.errors import (
     InvalidHeadersExample,
     InvalidRegexPattern,
     InvalidSchema,
+    SchemathesisError,
     SerializationNotPossible,
     format_exception,
 )
@@ -263,20 +264,27 @@ def pytest_pycollect_makeitem(collector: nodes.Collector, name: str, obj: Any) -
 
 @pytest.hookimpl(tryfirst=True)  # type: ignore[misc]
 def pytest_exception_interact(node: Function, call: pytest.CallInfo, report: pytest.TestReport) -> None:
-    if call.excinfo and call.excinfo.type is FailureGroup:
-        tb_entries = list(call.excinfo.traceback)
-        total_frames = len(tb_entries)
-
-        # Keep internal Schemathesis frames + one extra one from the caller
-        skip_frames = 0
-        for i in range(total_frames - 1, -1, -1):
-            entry = tb_entries[i]
-
-            if not str(entry.path).endswith("schemathesis/generation/case.py"):
-                skip_frames = i
-                break
-
-        report.longrepr = "".join(format_exception(call.excinfo.value, with_traceback=True, skip_frames=skip_frames))
+    if call.excinfo:
+        if issubclass(call.excinfo.type, SchemathesisError) and hasattr(call.excinfo.value, "__notes__"):
+            # Hypothesis adds quite a lot of additional debug information which is not that helpful in Schemathesis
+            call.excinfo.value.__notes__.clear()
+            report.longrepr = "".join(format_exception(call.excinfo.value))
+        if call.excinfo.type is FailureGroup:
+            tb_entries = list(call.excinfo.traceback)
+            total_frames = len(tb_entries)
+
+            # Keep internal Schemathesis frames + one extra one from the caller
+            skip_frames = 0
+            for i in range(total_frames - 1, -1, -1):
+                entry = tb_entries[i]
+
+                if not str(entry.path).endswith("schemathesis/generation/case.py"):
+                    skip_frames = i
+                    break
+
+            report.longrepr = "".join(
+                format_exception(call.excinfo.value, with_traceback=True, skip_frames=skip_frames)
+            )
 
 
 @hookimpl(wrapper=True)

{schemathesis-4.0.2 → schemathesis-4.0.3}/src/schemathesis/specs/openapi/_hypothesis.py

@@ -120,7 +120,7 @@ def openapi_cases(
                     for media_type in all_media_types
                 ):
                     # None of media types defined for this operation are not supported
-                    raise SerializationNotPossible.from_media_types(*all_media_types)
+                    raise SerializationNotPossible.from_media_types(*all_media_types) from None
                 # Other media types are possible - avoid choosing this media type in the future
                 event_text = f"Can't serialize data to `{parameter.media_type}`."
                 note(f"{event_text} {SERIALIZERS_SUGGESTION_MESSAGE}")

{schemathesis-4.0.2 → schemathesis-4.0.3}/src/schemathesis/transport/requests.py

@@ -85,6 +85,12 @@ class RequestsTransport(BaseTransport["requests.Session"]):
     def send(self, case: Case, *, session: requests.Session | None = None, **kwargs: Any) -> Response:
         import requests
 
+        config = case.operation.schema.config
+
+        timeout = config.request_timeout_for(operation=case.operation)
+        verify = config.tls_verify_for(operation=case.operation)
+        cert = config.request_cert_for(operation=case.operation)
+
         if session is not None and session.headers:
             # These headers are explicitly provided via config or CLI args.
             # They have lower priority than ones provided via `kwargs`
@@ -94,6 +100,14 @@ class RequestsTransport(BaseTransport["requests.Session"]):
             kwargs["headers"] = headers
 
         data = self.serialize_case(case, **kwargs)
+
+        if verify is not None:
+            data.setdefault("verify", verify)
+        if timeout is not None:
+            data.setdefault("timeout", timeout)
+        if cert is not None:
+            data.setdefault("cert", cert)
+
         kwargs.pop("base_url", None)
         data.update({key: value for key, value in kwargs.items() if key not in data})
         data.setdefault("timeout", DEFAULT_RESPONSE_TIMEOUT)
@@ -119,7 +133,6 @@ class RequestsTransport(BaseTransport["requests.Session"]):
         verify = data.get("verify", True)
 
         try:
-            config = case.operation.schema.config
             rate_limit = config.rate_limit_for(operation=case.operation)
             with ratelimit(rate_limit, config.base_url):
                 response = session.request(**data)  # type: ignore

{schemathesis-4.0.2 → schemathesis-4.0.3}/test/test_pytest.py

@@ -869,6 +869,78 @@ def test(case):
     result.assert_outcomes(passed=2)
 
 
+@pytest.mark.operations("csv_payload")
+def test_error_reporting(testdir, openapi3_schema_url):
+    testdir.make_test(
+        f"""
+schema = schemathesis.openapi.from_url('{openapi3_schema_url}')
+
+@schema.include(path_regex="csv").parametrize()
+def test(case):
+    pass
+"""
+    )
+    result = testdir.runpytest()
+    assert "while generating" not in result.stdout.str()
+
+
+@pytest.mark.operations("failure")
+def test_disable_checks_via_config(testdir, openapi3_schema_url):
+    testdir.make_test(
+        f"""
+config = schemathesis.Config.from_dict({{
+    "checks": {{
+        "not_a_server_error": {{"enabled": False}},
+        "content_type_conformance": {{"enabled": False}},
+    }}
+}})
+schema = schemathesis.openapi.from_url('{openapi3_schema_url}', config=config)
+
+@schema.include(name="GET /failure").parametrize()
+def test(case):
+    case.call_and_validate()
+"""
+    )
+    result = testdir.runpytest()
+    result.assert_outcomes(passed=1)
+
+
+def test_transport_kwargs_from_config(testdir, openapi3_schema_url):
+    testdir.make_test(
+        f"""
+config = schemathesis.Config.from_dict({{
+    "tls-verify": False,
+    "headers": {{ "X-Foo": "Bar", "X-Spam": "Unknown" }},
+    "request-timeout": 3,
+    "request-cert": "foo",
+    "phases": {{
+        "coverage": {{
+            "enabled": False,
+        }}
+    }}
+}})
+schema = schemathesis.openapi.from_url('{openapi3_schema_url}', config=config)
+
+def noop(*args, **kwargs):
+    pass
+
+@schema.include(name="GET /success").parametrize()
+@settings(suppress_health_check=list(HealthCheck))
+def test(case, mocker):
+    spy = mocker.patch("requests.Session.request")
+    case.call_and_validate(checks=[noop], headers={{"X-Spam": "Explicit" }})
+    kwargs = spy.call_args[1]
+    assert kwargs["verify"] is False
+    assert kwargs["timeout"] == 3
+    assert kwargs["cert"] == "foo"
+    assert kwargs["headers"]["X-Foo"] == "Bar"
+    assert kwargs["headers"]["X-Spam"] == "Explicit"
+"""
+    )
+    result = testdir.runpytest()
+    result.assert_outcomes(passed=1)
+
+
 def test_config_using_headers(testdir):
     testdir.make_test(
         """