schemathesis 4.1.0__tar.gz → 4.1.1__tar.gz

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/build.yml

@@ -25,7 +25,7 @@ jobs:
     name: Generic pre-commit checks
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
 
@@ -47,7 +47,7 @@ jobs:
     name: Tests (Python ${{ matrix.python }} on ${{ matrix.os }} ${{ matrix.tox_env }})
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
 
@@ -78,7 +78,7 @@ jobs:
     name: Test piping output to a file with CP1252 encoding on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
 
@@ -108,6 +108,6 @@ jobs:
     name: Spell Check
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: crate-ci/typos@master

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/codeql-analysis.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v5
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -38,7 +38,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3.29.8
+        uses: github/codeql-action/init@v3.29.9
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -49,7 +49,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v3.29.8
+        uses: github/codeql-action/autobuild@v3.29.9
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -63,4 +63,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3.29.8
+        uses: github/codeql-action/analyze@v3.29.9

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/codspeed.yml

@@ -14,7 +14,7 @@ jobs:
   benchmarks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
       - uses: actions/setup-python@v5
         with:
           # Python 3.12 for flamegraph support

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/commit.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Check out code
-        uses: actions/checkout@v4.2.1
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
       - name: Run commitsar

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/example-build.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-22.04
 
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
 
       - name: Start containers
         run: docker compose up -d --build

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/master_update.yml

@@ -20,7 +20,7 @@ jobs:
             tag: "latest-bookworm"
 
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/memory-benchmark.yml

@@ -13,7 +13,7 @@ jobs:
   memory-benchmark:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
 

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
             tag-suffix: "-bookworm"
 
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
 
       - name: Detect pre-release
         id: detect-prerelease
@@ -101,7 +101,7 @@ jobs:
     name: Build and publish package to pypi.org
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
 

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/test-corpus.yml

@@ -12,7 +12,7 @@ jobs:
     name: Default corpus tests
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
           submodules: true
@@ -29,7 +29,7 @@ jobs:
     name: Corpus tests for the coverage phase
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
           submodules: true

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/test-hypothesis.yml

@@ -11,7 +11,7 @@ jobs:
     name: Hypothesis tests with CI profile
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
 

{schemathesis-4.1.0 → schemathesis-4.1.1}/.github/workflows/update-pre-commit.yml

@@ -10,7 +10,7 @@ jobs:
     name: Update pre-commit
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4.2.1
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 1
           submodules: true

{schemathesis-4.1.0 → schemathesis-4.1.1}/CHANGELOG.md

@@ -1,6 +1,19 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.1.0...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.1.1...HEAD) - TBD
+
+## [4.1.1](https://github.com/schemathesis/schemathesis/compare/v4.1.0...v4.1.1) - 2025-08-23
+
+### :bug: Fixed
+
+- False positives in `use_after_free` check when validation errors occur before resource existence checks.
+- Ignored `apply_to` and `skip_for` filters in `map_case`, `filter_case`, `flatmap_case`, and `before_generate_case` hooks.
+- Resetting hook filters in case of suppressed errors during hook registration.
+
+### :wrench: Changed
+
+- Display all cURL commands for stateful failures.
+- Inject unconstrained path parameters when missing in the operation definition (schema error still reported).
 
 ## [4.1.0](https://github.com/schemathesis/schemathesis/compare/v4.0.26...v4.1.0) - 2025-08-17
 

{schemathesis-4.1.0 → schemathesis-4.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.1.0
+Version: 4.1.1
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md

{schemathesis-4.1.0 → schemathesis-4.1.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.1.0"
+version = "4.1.1"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/core/__init__.py

@@ -7,6 +7,7 @@ SCHEMATHESIS_TEST_CASE_HEADER = "X-Schemathesis-TestCaseId"
 HYPOTHESIS_IN_MEMORY_DATABASE_IDENTIFIER = ":memory:"
 INTERNAL_BUFFER_SIZE = 32 * 1024
 DEFAULT_STATEFUL_STEP_COUNT = 6
+INJECTED_PATH_PARAMETER_KEY = "x-schemathesis-injected"
 
 
 class NotSet: ...

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/core/failures.py

@@ -310,6 +310,7 @@ def format_failures(
         output += "\n    <NO RESPONSE>"
 
     # cURL
-    output += "\n" + formatter(MessageBlock.CURL, f"\nReproduce with: \n\n    {curl}")
+    _curl = "\n".join(f"    {line}" for line in curl.splitlines())
+    output += "\n" + formatter(MessageBlock.CURL, f"\nReproduce with: \n\n{_curl}")
 
     return output

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/engine/phases/stateful/_executor.py

@@ -330,10 +330,18 @@ def validate_response(
         if stateful_ctx.is_seen_in_suite(failure) or stateful_ctx.is_seen_in_run(failure):
             return
         failure_data = recorder.find_failure_data(parent_id=case.id, failure=failure)
+
+        # Collect the whole chain of cURL commands
+        commands = []
+        parent = recorder.find_parent(case_id=failure_data.case.id)
+        while parent is not None:
+            commands.append(parent.as_curl_command(headers=failure_data.headers, verify=failure_data.verify))
+            parent = recorder.find_parent(case_id=parent.id)
+        commands.append(failure_data.case.as_curl_command(headers=failure_data.headers, verify=failure_data.verify))
         recorder.record_check_failure(
             name=name,
             case_id=failure_data.case.id,
-            code_sample=failure_data.case.as_curl_command(headers=failure_data.headers, verify=failure_data.verify),
+            code_sample="\n".join(commands),
             failure=failure,
         )
         control.count_failure()

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/engine/phases/unit/_executor.py

@@ -49,6 +49,7 @@ from schemathesis.generation.case import Case
 from schemathesis.generation.hypothesis.builder import (
     InvalidHeadersExampleMark,
     InvalidRegexMark,
+    MissingPathParameters,
     NonSerializableMark,
     UnsatisfiableExampleMark,
 )
@@ -73,6 +74,7 @@ def run_test(
     yield scenario_started
     errors: list[Exception] = []
     skip_reason = None
+    error: Exception
     test_start_time = time.monotonic()
     recorder = ScenarioRecorder(label=operation.label)
     state = TestingState()
@@ -227,11 +229,15 @@ def run_test(
         and any(check.status == Status.FAILURE for checks in recorder.checks.values() for check in checks)
     ):
         status = Status.FAILURE
+
+    # Check for various errors during generation (tests may still have been generated)
+
     if UnsatisfiableExampleMark.is_set(test_function):
         status = Status.ERROR
         yield non_fatal_error(
             hypothesis.errors.Unsatisfiable("Failed to generate test cases from examples for this API operation")
         )
+
     non_serializable = NonSerializableMark.get(test_function)
     if non_serializable is not None and status != Status.ERROR:
         status = Status.ERROR
@@ -248,10 +254,17 @@ def run_test(
     if invalid_regex is not None and status != Status.ERROR:
         status = Status.ERROR
         yield non_fatal_error(InvalidRegexPattern.from_schema_error(invalid_regex, from_examples=True))
+
     invalid_headers = InvalidHeadersExampleMark.get(test_function)
     if invalid_headers:
         status = Status.ERROR
         yield non_fatal_error(InvalidHeadersExample.from_headers(invalid_headers))
+
+    missing_path_parameters = MissingPathParameters.get(test_function)
+    if missing_path_parameters:
+        status = Status.ERROR
+        yield non_fatal_error(missing_path_parameters)
+
     for error in deduplicate_errors(errors):
         yield non_fatal_error(error)
 

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/filters.py

@@ -175,6 +175,10 @@ class FilterSet:
         """Whether the filter set does not contain any filters."""
         return not self._includes and not self._excludes
 
+    def clear(self) -> None:
+        self._includes.clear()
+        self._excludes.clear()
+
     def include(
         self,
         func: MatcherFunc | None = None,

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/generation/hypothesis/builder.py

@@ -20,7 +20,7 @@ from requests.models import CaseInsensitiveDict
 from schemathesis import auths
 from schemathesis.auths import AuthStorage, AuthStorageMark
 from schemathesis.config import GenerationConfig, ProjectConfig
-from schemathesis.core import NOT_SET, NotSet, SpecificationFeature, media_types
+from schemathesis.core import INJECTED_PATH_PARAMETER_KEY, NOT_SET, NotSet, SpecificationFeature, media_types
 from schemathesis.core.errors import InvalidSchema, SerializationNotPossible
 from schemathesis.core.marks import Mark
 from schemathesis.core.transforms import deepclone
@@ -185,6 +185,18 @@ def create_test(
             generation_config=generation,
         )
 
+    injected_path_parameter_names = [
+        parameter.name
+        for parameter in operation.path_parameters
+        if parameter.definition.get(INJECTED_PATH_PARAMETER_KEY)
+    ]
+    if injected_path_parameter_names:
+        names = ", ".join(f"'{name}'" for name in injected_path_parameter_names)
+        plural = "s" if len(injected_path_parameter_names) > 1 else ""
+        verb = "are" if len(injected_path_parameter_names) > 1 else "is"
+        error = InvalidSchema(f"Path parameter{plural} {names} {verb} not defined")
+        MissingPathParameters.set(hypothesis_test, error)
+
     setattr(hypothesis_test, SETTINGS_ATTRIBUTE_NAME, settings)
 
     return hypothesis_test
@@ -902,3 +914,4 @@ UnsatisfiableExampleMark = Mark[Unsatisfiable](attr_name="unsatisfiable_example"
 NonSerializableMark = Mark[SerializationNotPossible](attr_name="non_serializable")
 InvalidRegexMark = Mark[SchemaError](attr_name="invalid_regex")
 InvalidHeadersExampleMark = Mark[dict[str, str]](attr_name="invalid_example_header")
+MissingPathParameters = Mark[InvalidSchema](attr_name="missing_path_parameters")

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/hooks.py

@@ -2,10 +2,11 @@ from __future__ import annotations
 
 import inspect
 from collections import defaultdict
+from contextlib import contextmanager
 from dataclasses import dataclass, field
 from enum import Enum, unique
 from functools import lru_cache, partial
-from typing import TYPE_CHECKING, Any, Callable, ClassVar, cast
+from typing import TYPE_CHECKING, Any, Callable, ClassVar, Generator, cast
 
 from schemathesis.core.marks import Mark
 from schemathesis.core.transport import Response
@@ -54,18 +55,28 @@ def to_filterable_hook(dispatcher: HookDispatcher) -> Callable:
     filter_used = False
     filter_set = FilterSet()
 
+    @contextmanager
+    def _reset_on_error() -> Generator:
+        try:
+            yield
+        except Exception:
+            filter_set.clear()
+            raise
+
     def register(hook: str | Callable) -> Callable:
         nonlocal filter_set
 
         if filter_used:
-            validate_filterable_hook(hook)
+            with _reset_on_error():
+                validate_filterable_hook(hook)
 
         if isinstance(hook, str):
 
             def decorator(func: Callable) -> Callable:
                 hook_name = cast(str, hook)
                 if filter_used:
-                    validate_filterable_hook(hook)
+                    with _reset_on_error():
+                        validate_filterable_hook(hook)
                 func.filter_set = filter_set  # type: ignore[attr-defined]
                 return dispatcher.register_hook_with_name(func, hook_name)
 
@@ -86,13 +97,15 @@ def to_filterable_hook(dispatcher: HookDispatcher) -> Callable:
             nonlocal filter_used
 
             filter_used = True
-            filter_set.include(*args, **kwargs)
+            with _reset_on_error():
+                filter_set.include(*args, **kwargs)
 
         def exclude(*args: Any, **kwargs: Any) -> None:
             nonlocal filter_used
 
             filter_used = True
-            filter_set.exclude(*args, **kwargs)
+            with _reset_on_error():
+                filter_set.exclude(*args, **kwargs)
 
         attach_filter_chain(target, "apply_to", include)
         attach_filter_chain(target, "skip_for", exclude)
@@ -113,11 +126,9 @@ class HookDispatcher:
     _hooks: defaultdict[str, list[Callable]] = field(default_factory=lambda: defaultdict(list))
     _specs: ClassVar[dict[str, RegisteredHook]] = {}
 
-    def __post_init__(self) -> None:
-        self.hook = to_filterable_hook(self)  # type: ignore[method-assign]
-
-    def hook(self, hook: str | Callable) -> Callable:
-        raise NotImplementedError
+    @property
+    def hook(self) -> Callable:
+        return to_filterable_hook(self)
 
     def apply(self, hook: Callable, *, name: str | None = None) -> Callable[[Callable], Callable]:
         """Register hook to run only on one test function.
@@ -201,6 +212,9 @@ class HookDispatcher:
         """Get a list of hooks registered for a name."""
         return self._hooks.get(name, [])
 
+    def get_all(self) -> dict[str, list[Callable]]:
+        return self._hooks
+
     def apply_to_container(
         self, strategy: st.SearchStrategy, container: str, context: HookContext
     ) -> st.SearchStrategy:

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/pytest/plugin.py

@@ -298,6 +298,7 @@ def pytest_pyfunc_call(pyfuncitem):  # type:ignore
     from schemathesis.generation.hypothesis.builder import (
         InvalidHeadersExampleMark,
         InvalidRegexMark,
+        MissingPathParameters,
         NonSerializableMark,
         UnsatisfiableExampleMark,
     )
@@ -333,8 +334,13 @@ def pytest_pyfunc_call(pyfuncitem):  # type:ignore
             pytest.skip(exc.args[0])
         except SchemaError as exc:
             raise InvalidRegexPattern.from_schema_error(exc, from_examples=False) from exc
+
         invalid_headers = InvalidHeadersExampleMark.get(pyfuncitem.obj)
         if invalid_headers is not None:
             raise InvalidHeadersExample.from_headers(invalid_headers) from None
+
+        missing_path_parameters = MissingPathParameters.get(pyfuncitem.obj)
+        if missing_path_parameters:
+            raise missing_path_parameters from None
     else:
         yield

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/schemas.py

@@ -27,7 +27,7 @@ from schemathesis.generation.case import Case
 from schemathesis.generation.hypothesis import strategies
 from schemathesis.generation.hypothesis.given import GivenInput, given_proxy
 from schemathesis.generation.meta import CaseMetadata
-from schemathesis.hooks import HookDispatcherMark
+from schemathesis.hooks import HookDispatcherMark, _should_skip_hook
 
 from .auths import AuthStorage
 from .filters import (
@@ -712,14 +712,22 @@ class APIOperation(Generic[P]):
         def _apply_hooks(dispatcher: HookDispatcher, _strategy: SearchStrategy[Case]) -> SearchStrategy[Case]:
             context = HookContext(operation=self)
             for hook in dispatcher.get_all_by_name("before_generate_case"):
+                if _should_skip_hook(hook, context):
+                    continue
                 _strategy = hook(context, _strategy)
             for hook in dispatcher.get_all_by_name("filter_case"):
+                if _should_skip_hook(hook, context):
+                    continue
                 hook = partial(hook, context)
                 _strategy = _strategy.filter(hook)
             for hook in dispatcher.get_all_by_name("map_case"):
+                if _should_skip_hook(hook, context):
+                    continue
                 hook = partial(hook, context)
                 _strategy = _strategy.map(hook)
             for hook in dispatcher.get_all_by_name("flatmap_case"):
+                if _should_skip_hook(hook, context):
+                    continue
                 hook = partial(hook, context)
                 _strategy = _strategy.flatmap(hook)
             return _strategy

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/specs/openapi/checks.py

@@ -366,7 +366,10 @@ def use_after_free(ctx: CheckContext, response: Response, case: Case) -> bool |
 
     if not isinstance(case.operation.schema, BaseOpenAPISchema) or is_unexpected_http_status_case(case):
         return True
-    if response.status_code == 404 or response.status_code >= 500:
+
+    # Only check for use-after-free on successful responses (2xx) or redirects (3xx)
+    # Other status codes indicate request-level issues / server errors, not successful resource access
+    if not (200 <= response.status_code < 400):
         return None
 
     for related_case in ctx._find_related(case_id=case.id):

{schemathesis-4.1.0 → schemathesis-4.1.1}/src/schemathesis/specs/openapi/schemas.py

@@ -1,6 +1,7 @@
 from __future__ import annotations
 
 import itertools
+import string
 from collections import defaultdict
 from contextlib import ExitStack, contextmanager, suppress
 from dataclasses import dataclass, field
@@ -29,7 +30,7 @@ from requests.exceptions import InvalidHeader
 from requests.structures import CaseInsensitiveDict
 from requests.utils import check_header_validity
 
-from schemathesis.core import NOT_SET, NotSet, Specification, deserialization, media_types
+from schemathesis.core import INJECTED_PATH_PARAMETER_KEY, NOT_SET, NotSet, Specification, deserialization, media_types
 from schemathesis.core.compat import RefResolutionError
 from schemathesis.core.errors import InternalError, InvalidSchema, LoaderError, LoaderErrorKind, OperationNotFound
 from schemathesis.core.failures import Failure, FailureGroup, MalformedJson
@@ -89,6 +90,17 @@ def check_header(parameter: dict[str, Any]) -> None:
         raise InvalidSchema(f"Invalid header name: {name}")
 
 
+def get_template_fields(template: str) -> set[str]:
+    """Extract named placeholders from a string template."""
+    try:
+        parameters = {name for _, name, _, _ in string.Formatter().parse(template) if name is not None}
+        # Check for malformed params to avoid injecting them - they will be checked later on in the workflow
+        template.format(**dict.fromkeys(parameters, ""))
+        return parameters
+    except (ValueError, IndexError):
+        return set()
+
+
 @dataclass(eq=False, repr=False)
 class BaseOpenAPISchema(BaseSchema):
     nullable_name: ClassVar[str] = ""
@@ -100,6 +112,7 @@ class BaseOpenAPISchema(BaseSchema):
     # excessive resolving
     _inline_reference_cache_lock: RLock = field(default_factory=RLock)
     component_locations: ClassVar[tuple[tuple[str, ...], ...]] = ()
+    _path_parameter_template: ClassVar[dict[str, Any]] = None  # type: ignore
 
     @property
     def specification(self) -> Specification:
@@ -391,7 +404,6 @@ class BaseOpenAPISchema(BaseSchema):
         resolved: dict[str, Any],
         scope: str,
     ) -> APIOperation:
-        """Create JSON schemas for the query, body, etc from Swagger parameters definitions."""
         __tracebackhide__ = True
         base_url = self.get_base_url()
         operation: APIOperation[OpenAPIParameter] = APIOperation(
@@ -404,6 +416,14 @@ class BaseOpenAPISchema(BaseSchema):
         )
         for parameter in parameters:
             operation.add_parameter(parameter)
+        # Inject unconstrained path parameters if any is missing
+        missing_parameter_names = get_template_fields(operation.path) - {
+            parameter.name for parameter in operation.path_parameters
+        }
+        for name in missing_parameter_names:
+            definition = {"name": name, INJECTED_PATH_PARAMETER_KEY: True, **deepclone(self._path_parameter_template)}
+            for parameter in self.collect_parameters([definition], resolved):
+                operation.add_parameter(parameter)
         config = self.config.generation_for(operation=operation)
         if config.with_security_parameters:
             self.security.process_definitions(self.raw_schema, operation, self.resolver)
@@ -835,6 +855,7 @@ class SwaggerV20(BaseOpenAPISchema):
     security = SwaggerSecurityProcessor()
     component_locations: ClassVar[tuple[tuple[str, ...], ...]] = (("definitions",),)
     links_field = "x-links"
+    _path_parameter_template = {"in": "path", "required": True, "type": "string"}
 
     @property
     def specification(self) -> Specification:
@@ -1003,6 +1024,7 @@ class OpenApi30(SwaggerV20):
     security = OpenAPISecurityProcessor()
     component_locations = (("components", "schemas"),)
     links_field = "links"
+    _path_parameter_template = {"in": "path", "required": True, "schema": {"type": "string"}}
 
     @property
     def specification(self) -> Specification:

{schemathesis-4.1.0 → schemathesis-4.1.1}/test/cli/__snapshots__/test_checks/test_ensure_resource_availability_does_not_trigger_on_subsequent_error.raw

@@ -9,7 +9,7 @@ Schemathesis dev
 
      Base URL:         http://127.0.0.1/
      Specification:    Open API 3.1.0
-     Operations:       2 selected / 2 total
+     Operations:       3 selected / 3 total
 
 
  ✅  API capabilities:
@@ -19,15 +19,15 @@ Schemathesis dev
  ✅  Stateful (in 0.00s)
 
      Scenarios:    N
-     API Links:    N covered / 1 selected / 1 total
+     API Links:    N covered / 2 selected / 2 total
 
      ✅ N passed
 
 =================================== SUMMARY ====================================
 
 API Operations:
-  Selected: 2/2
-  Tested: 2
+  Selected: 3/3
+  Tested: 3
 
 Test Phases:
   ⏭  Examples (disabled)

schemathesis-4.1.1/test/cli/__snapshots__/test_checks/test_use_after_free_does_not_trigger_on_error.raw

@@ -0,0 +1,43 @@
+Exit code: 0
+---
+Stdout:
+Schemathesis dev
+━━━━━━━━━━━━━━━━
+
+
+ ✅  Loaded specification from http://127.0.0.1/openapi.json (in 0.00s)
+
+     Base URL:         http://127.0.0.1/
+     Specification:    Open API 3.1.0
+     Operations:       3 selected / 3 total
+
+
+ ✅  API capabilities:
+
+     Supports NULL byte in headers:    ✓
+
+ ✅  Stateful (in 0.00s)
+
+     Scenarios:    N
+     API Links:    N covered / 2 selected / 2 total
+
+     ✅ N passed
+
+=================================== SUMMARY ====================================
+
+API Operations:
+  Selected: 3/3
+  Tested: 3
+
+Test Phases:
+  ⏭  Examples (disabled)
+  ⏭  Coverage (disabled)
+  ⏭  Fuzzing (disabled)
+  ✅ Stateful
+
+Test cases:
+  N generated, N passed
+
+Seed: 42
+
+=========================== No issues found in 1.00s ===========================