schemathesis 4.3.15__tar.gz → 4.3.17__tar.gz

{schemathesis-4.3.15 → schemathesis-4.3.17}/.github/workflows/build.yml

@@ -35,13 +35,13 @@ jobs:
 
       - uses: astral-sh/setup-uv@v7
 
-      - run: uvx pre-commit run --all-files
+      - run: uvx prek run --all-files
 
   tests:
     strategy:
       matrix:
         os: [ubuntu-22.04, windows-2022]
-        python: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+        python: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
       fail-fast: false
 
     name: Tests (Python ${{ matrix.python }} on ${{ matrix.os }} ${{ matrix.tox_env }})

{schemathesis-4.3.15 → schemathesis-4.3.17}/.github/workflows/memory-benchmark.yml

@@ -19,7 +19,7 @@ jobs:
 
       - uses: actions/setup-python@v6
         with:
-          python-version: '3.13'
+          python-version: '3.14'
 
       - uses: astral-sh/setup-uv@v7
 

{schemathesis-4.3.15 → schemathesis-4.3.17}/.github/workflows/test-corpus.yml

@@ -19,7 +19,7 @@ jobs:
 
       - uses: actions/setup-python@v6
         with:
-          python-version: "3.11"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@v7
 
@@ -36,7 +36,7 @@ jobs:
 
       - uses: actions/setup-python@v6
         with:
-          python-version: "3.11"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@v7
 
@@ -53,7 +53,7 @@ jobs:
 
       - uses: actions/setup-python@v6
         with:
-          python-version: "3.11"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@v7
 

{schemathesis-4.3.15 → schemathesis-4.3.17}/.github/workflows/test-hypothesis.yml

@@ -17,7 +17,7 @@ jobs:
 
       - uses: actions/setup-python@v6
         with:
-          python-version: "3.11"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@v7
 

{schemathesis-4.3.15 → schemathesis-4.3.17}/.github/workflows/update-pre-commit.yml

@@ -17,7 +17,7 @@ jobs:
 
       - uses: astral-sh/setup-uv@v7
 
-      - run: uvx pre-commit autoupdate
+      - run: uvx prek autoupdate
 
       - name: Open pull request
         uses: peter-evans/create-pull-request@v7

{schemathesis-4.3.15 → schemathesis-4.3.17}/.pre-commit-config.yaml

@@ -33,11 +33,7 @@ repos:
         additional_dependencies: [types-requests, types-PyYAML]
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.2
+    rev: v0.14.3
     hooks:
       - id: ruff-format
-
-  - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.14.2
-    hooks:
       - id: ruff-check

{schemathesis-4.3.15 → schemathesis-4.3.17}/CHANGELOG.md

@@ -1,6 +1,37 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.3.15...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.3.17...HEAD) - TBD
+
+## [4.3.17](https://github.com/schemathesis/schemathesis/compare/v4.3.16...v4.3.17) - 2025-11-02
+
+### :rocket: Added
+
+- Python 3.14 builds.
+
+### :bug: Fixed
+
+- Config-based auth, headers, test phases and generation settings not applied when using `schemathesis.pytest.from_fixture`.
+- Support for method-based tests with `schemathesis.pytest.from_fixture`.
+- Checks not loaded when using `schemathesis.pytest.from_fixture`, causing `AttributeError` when accessing `schemathesis.checks.*`.
+
+### :wrench: Changed
+
+- Improve error messages for exceptions in custom auth providers.
+- Refactor coverage phase metadata to use type-safe enums instead of string-based checks.
+
+### :racing_car: Performance
+
+- ~30% faster fuzzing & stateful phases due to aggressive caching of data generation strategies.
+
+## [4.3.16](https://github.com/schemathesis/schemathesis/compare/v4.3.15...v4.3.16) - 2025-10-30
+
+### :wrench: Changed
+
+- Improve error message when remote reference is not JSON / YAML.
+
+### :racing_car: Performance
+
+- ~10x faster data generation for schemas with `readOnly` / `writeOnly`.
 
 ## [4.3.15](https://github.com/schemathesis/schemathesis/compare/v4.3.14...v4.3.15) - 2025-10-29
 

{schemathesis-4.3.15 → schemathesis-4.3.17}/CONTRIBUTING.md

@@ -7,12 +7,12 @@ Welcome! Thank you for considering contributing to Schemathesis. Your feedback a
 **For code contributions**: Make sure you have the following installed:
 
 - Python 3.9 or higher
-- `pre-commit`
+- `prek`
 - `tox`
 - `curl` (required by some integration tests; install via your OS package manager, e.g., `apt install curl` or `brew install curl`)
 
 ```bash
-uv pip install pre-commit tox
+uv pip install prek tox
 ```
 
 **For documentation contributions**: No specific prerequisites are required.
@@ -53,10 +53,10 @@ uv pip install -e ".[dev]"
 
 This will install all the necessary packages for development, including those for documentation and tests.
 
-3. **Set Up Pre-commit Hooks**: Enable [pre-commit](https://pre-commit.com).
+3. **Set Up Pre-commit Hooks**: Enable [prek](https://github.com/j178/prek).
 
 ```bash
-pre-commit install
+prek install
 ```
 
 4. **Branching**: Create a new branch and switch to it. Target your pull request to the `master` branch of the main repository.

{schemathesis-4.3.15 → schemathesis-4.3.17}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.3.15
+Version: 4.3.17
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md
@@ -25,6 +25,7 @@ Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: Implementation :: PyPy
 Classifier: Topic :: Software Development :: Testing
@@ -50,7 +51,7 @@ Requires-Dist: tomli>=2.2.1; python_version < '3.11'
 Requires-Dist: typing-extensions>=4.12.2
 Requires-Dist: werkzeug<4,>=0.16.0
 Provides-Extra: bench
-Requires-Dist: pytest-codspeed==2.2.1; extra == 'bench'
+Requires-Dist: pytest-codspeed==4.2.0; extra == 'bench'
 Provides-Extra: cov
 Requires-Dist: coverage-enable-subprocess; extra == 'cov'
 Requires-Dist: coverage[toml]>=5.3; extra == 'cov'
@@ -65,8 +66,8 @@ Requires-Dist: hypothesis-openapi<1,>=0.2; (python_version >= '3.10') and extra
 Requires-Dist: mkdocs-material; extra == 'dev'
 Requires-Dist: mkdocstrings[python]; extra == 'dev'
 Requires-Dist: pydantic>=1.10.2; extra == 'dev'
-Requires-Dist: pytest-asyncio<1.0,>=0.18.0; extra == 'dev'
-Requires-Dist: pytest-codspeed==2.2.1; extra == 'dev'
+Requires-Dist: pytest-asyncio<2.0,>=1.0; extra == 'dev'
+Requires-Dist: pytest-codspeed==4.2.0; extra == 'dev'
 Requires-Dist: pytest-httpserver<2.0,>=1.0; extra == 'dev'
 Requires-Dist: pytest-mock<4.0,>=3.7.0; extra == 'dev'
 Requires-Dist: pytest-trio<1.0,>=0.8; extra == 'dev'
@@ -85,7 +86,7 @@ Requires-Dist: fastapi>=0.86.0; extra == 'tests'
 Requires-Dist: flask<3.0,>=2.1.1; extra == 'tests'
 Requires-Dist: hypothesis-openapi<1,>=0.2; (python_version >= '3.10') and extra == 'tests'
 Requires-Dist: pydantic>=1.10.2; extra == 'tests'
-Requires-Dist: pytest-asyncio<1.0,>=0.18.0; extra == 'tests'
+Requires-Dist: pytest-asyncio<2.0,>=1.0; extra == 'tests'
 Requires-Dist: pytest-httpserver<2.0,>=1.0; extra == 'tests'
 Requires-Dist: pytest-mock<4.0,>=3.7.0; extra == 'tests'
 Requires-Dist: pytest-trio<1.0,>=0.8; extra == 'tests'

{schemathesis-4.3.15 → schemathesis-4.3.17}/benches/schema.py

@@ -16,7 +16,8 @@ from schemathesis.core.transforms import deepclone
 from schemathesis.core.transport import Response
 from schemathesis.engine import events, from_schema
 from schemathesis.generation.hypothesis import setup
-from schemathesis.specs.openapi._hypothesis import get_parameters_strategy, make_positive_strategy
+from schemathesis.generation.modes import GenerationMode
+from schemathesis.specs.openapi._hypothesis import get_parameters_strategy
 from schemathesis.specs.openapi.stateful import dependencies
 
 CURRENT_DIR = pathlib.Path(__file__).parent.absolute()
@@ -182,7 +183,7 @@ def _get_parameters_strategy(operations, config):
             ParameterLocation.PATH,
             ParameterLocation.QUERY,
         ]:
-            get_parameters_strategy(operation.ok(), make_positive_strategy, location, config)
+            get_parameters_strategy(operation.ok(), GenerationMode.POSITIVE, location, config)
 
 
 @pytest.mark.benchmark

{schemathesis-4.3.15 → schemathesis-4.3.17}/corpus/tools.py

@@ -48,7 +48,7 @@ Loader.add_implicit_resolver(  # type: ignore
                     |[-+]?[0-9][0-9_]*(?::[0-5]?[0-9])+\.[0-9_]*
                     |[-+]?\.(?:inf|Inf|INF)
                     |\.(?:nan|NaN|NAN))$""",
-        re.X,
+        re.VERBOSE,
     ),
     list("-+0123456789."),
 )

{schemathesis-4.3.15 → schemathesis-4.3.17}/docs/configuration.md

@@ -1,10 +1,10 @@
 # Configuration
 
-Most Schemathesis usage works without configuration. Use a config file for authentication, adjusting test generation, or customizing behavior for specific API operations.
+You don’t need a config file to get started. Add one when you need auth, different test volumes, per-operation overrides, or environment-specific settings.
 
 ## Quick Start
 
-### Creating Your First Config File
+### Create your first config file
 
 Create `schemathesis.toml` in your project directory:
 
@@ -13,53 +13,56 @@ Create `schemathesis.toml` in your project directory:
 generation.max-examples = 500
 
 # Increase timeout for slow APIs
-request-timeout = 10.0
+request-timeout = 10.0  # seconds
 
 # Basic authentication
 [auth]
 basic = { username = "${USERNAME}", password = "${PASSWORD}" }
 ```
 
+!!! note ""
+    Variables like `${USERNAME}` are read from your environment when Schemathesis loads the config.
+
 Set environment variables:
 ```bash
 export USERNAME="your_username"
 export PASSWORD="your_password"
 ```
 
-Run Schemathesis - it automatically finds and uses the config:
+Run Schemathesis. It automatically loads `schemathesis.toml`.
 ```bash
 schemathesis run https://api.example.com/openapi.json
 ```
 
-### Config File Location
+### Config file location
 
 Schemathesis looks for `schemathesis.toml` in:
 
 1. Current directory
-2. Parent directories (up to project root)
-3. Path specified with `--config-file`
+2. Parent directories (up to repository root)
+3. A path you pass with `--config-file` (this takes precedence)
 
-## Common Configuration Scenarios
+## Common configuration scenarios
 
 ### Authentication
 
-**API Key in Headers:**
+API key in a header:
 ```toml
 headers = { "X-API-Key" = "${API_KEY}" }
 ```
 
-**Bearer Token:**
+Bearer token in the `Authorization` header:
 ```toml
 headers = { Authorization = "Bearer ${TOKEN}" }
 ```
 
-**Basic Authentication:**
+Basic auth:
 ```toml
 [auth]
 basic = { username = "${USERNAME}", password = "${PASSWORD}" }
 ```
 
-**Different Auth for Specific Operations:**
+Different auth for specific operations:
 ```toml
 # Default auth for most operations
 headers = { Authorization = "Bearer ${TOKEN}" }
@@ -70,51 +73,54 @@ include-tag = "admin"
 headers = { Authorization = "Bearer ${ADMIN_TOKEN}" }
 ```
 
-### Adjusting Test Generation
+### Adjusting test generation
 
-**Run More Tests (Better Coverage, Slower):**
+More tests (better coverage, slower):
 ```toml
 generation.max-examples = 1000
 ```
 
-**Run Fewer Tests (Faster Feedback):**
+Fewer tests (faster feedback):
 ```toml
 generation.max-examples = 50
 ```
 
-**Thorough Testing for Important Endpoints:**
+Deeper testing for important API operations:
 ```toml
-# Default: fast testing
+# Default: fast feedback
 generation.max-examples = 100
 
-# Critical endpoints: more testing
+# Important operations: more depth
 [[operations]]
 include-path-regex = "/(payments|users)/"
 generation.max-examples = 500
 ```
 
-### Handling Slow APIs
+### Slow APIs
+
+If you see timeouts or flaky failures, increase per-operation timeouts.
 
-**Increase Timeouts:**
+Increase timeouts:
 ```toml
-request-timeout = 30.0  # 30 seconds
+request-timeout = 30.0  # seconds
 ```
 
-**Different Timeouts by Operation:**
+Different timeouts by operation:
 ```toml
 # Default timeout
 request-timeout = 5.0
 
-# Slow operations need more time
+# Give slow operations more time
 [[operations]]
 include-tag = "slow"
 request-timeout = 30.0
 ```
 
-### Environment-Specific Configuration
+### Environment-specific configuration
 
-**Different Base URLs per Environment:**
+Different base URLs per environment:
 ```toml
+# Switch base URL by environment variable
 base-url = "https://${ENVIRONMENT}.api.example.com"
 ```
 
@@ -122,22 +128,22 @@ base-url = "https://${ENVIRONMENT}.api.example.com"
 # Development
 export ENVIRONMENT="dev"
 
-# Production  
+# Production
 export ENVIRONMENT="prod"
 ```
 
-**Skip Problematic Endpoints in Development:**
+Skip problematic endpoints in development:
 ```toml
 [[operations]]
 include-path = "/billing/charge"
 enabled = false
 ```
 
-## Advanced Configuration
+## Advanced configuration
 
-**Advanced Filtering with Expressions:**
+Advanced filtering with expressions:
 ```toml
-# Operations without operationId
+# Ignore operations that lack operationId
 [[operations]]
 include-by = "operationId == null"
 enabled = false
@@ -148,9 +154,9 @@ exclude-by = "responses/200/description != 'Success'"
 checks.response_schema_conformance.enabled = false
 ```
 
-### Test Phase Control
+### Test phase control
 
-**Disable Specific Testing Phases:**
+Disable specific testing phases:
 ```toml
 [phases]
 # Skip stateful testing for faster runs
@@ -160,7 +166,7 @@ stateful.enabled = false
 stateful.generation.max-examples = 10
 ```
 
-**Phase-Specific Settings per Operation:**
+Phase-specific settings per operation:
 ```toml
 [[operations]]
 include-name = "POST /orders"
@@ -170,9 +176,10 @@ phases.fuzzing.generation.max-examples = 500
 phases.stateful.generation.max-examples = 20
 ```
 
-### Multi-Project Configuration
+### Multi-project configuration
+
+Top-level options act as defaults for all projects. Each `[[project]]` can override them.
 
-**Testing Multiple APIs:**
 ```toml
 # Global defaults
 generation.max-examples = 100
@@ -192,9 +199,9 @@ base-url = "https://users.example.com"
 request-timeout = 2.0
 ```
 
-### Custom Check Configuration
+### Custom check configuration
 
-**Disable Problematic Checks:**
+Disable noisy checks:
 ```toml
 [checks]
 # Disable globally
@@ -206,7 +213,7 @@ include-name = "POST /uploads"
 checks.positive_data_acceptance.expected-statuses = [200, 201, 202]
 ```
 
-**Enable Only Specific Checks:**
+Enable only specific checks:
 ```toml
 [checks]
 enabled = false

{schemathesis-4.3.15 → schemathesis-4.3.17}/docs/faq.md

@@ -96,6 +96,27 @@ Schemathesis has the following limitations:
 
 If you encounter issues not listed here, please report them on our [GitHub issues page](https://github.com/schemathesis/schemathesis/issues).
 
+## Why is Schemathesis skipping my Authorization header?
+
+Schemathesis **intentionally** removes or modifies authentication in some test cases. This is security testing, not a bug.
+
+**Why this happens:**
+
+Schemathesis verifies that your API properly validates authentication by testing with:
+- No authentication credentials
+- Incorrect authentication credentials
+
+This helps catch authentication bypass vulnerabilities where APIs accept requests they should reject.
+
+**When you'll see this:**
+
+- The `ignored_auth` check makes additional requests without auth or with invalid credentials
+- Some test cases in the coverage phase may omit required headers including Authorization
+- You'll see failures if your API accepts requests it should reject
+
+!!! important ""
+    The majority of test cases still use your provided authentication normally. Only specific security-focused tests intentionally modify it.
+
 ## Can I use Schemathesis with Allure?
 
 Yes, through JUnit XML export. Allure can generate rich visual reports from Schemathesis test results.

{schemathesis-4.3.15 → schemathesis-4.3.17}/docs/reference/configuration.md

@@ -1,19 +1,19 @@
 # Configuration Options
 
-This reference covers all the configuration options available in `schemathesis.toml`. The settings are organized into two main categories:
+This page lists every `schemathesis.toml` option and how it is resolved at runtime. The settings are organized into two main categories:
 
 - **Global**: These control CLI behavior, output formatting, and overall test execution. They are defined at the top level and affect the CLI invocation.
-- **Per-Project**: These let you customize configurations for individual API projects. If project-level settings are placed at the top level (without a `[[project]]` namespace), they are used as defaults for any tested project.
+- **Project**: Settings under `[[project]]` customize a single API. If you place project settings at the top level (without `[[project]]`), they become defaults for all projects.
 
 ## Configuration Resolution
 
-Schemathesis applies settings in the following hierarchy (from highest to lowest precedence):
+Schemathesis applies settings from highest to lowest precedence:
 
 1. CLI options
 2. Operation-specific phase settings
 3. Global phase settings (e.g., `[phases.fuzzing]`)
-4. Operation-level settings (e.g., `[[operations]]`)
-5. Project-level settings (e.g., `[[project]]`)
+4. Operation settings (e.g., `[[operations]]`)
+5. Project settings (e.g., `[[project]]`)
 6. Global settings
 
 ## Environment Variable Substitution
@@ -28,7 +28,7 @@ headers = { Authorization = "Bearer ${API_TOKEN}" }
 This allows you to maintain a single configuration file across different environments by changing environment variables rather than the configuration itself.
 
 !!! note ""
-    If you use `pytest`, environment variables are resolved when the `SchemathesisConfig` object is initialized, which usually happens inside schema loaders like `schemathesis.openapi.from_url`.
+    With `pytest`, variables are resolved when `SchemathesisConfig` is created (typically inside `schemathesis.openapi.from_url`).
 
 ## Operation-Specific Configuration
 
@@ -42,9 +42,9 @@ include-path = "/users"
 exclude-method = "POST"
 # By full operation name
 # include-name = "POST /users/"
-# By Open API tag
+# By OpenAPI tag
 # include-tag = "admin"
-# By Open API operation ID
+# By OpenAPI operation ID
 # include-operation-id = "delete-user"
 enabled = false
 ```
@@ -81,7 +81,7 @@ parameters = { "path.user_id" = 42, "query.user_id" = 100 }
     **Type**: `Boolean or None`  
     **Default**: `null`  
 
-    Controls ANSI color output in the CLI. Schemathesis auto-detects color support by default. Set to `true` to force color output or `false` to disable it.
+    Use color in CLI output. Schemathesis auto-detects color support by default Set `true` to force color, `false` to disable.
 
     ```toml
     color = false
@@ -133,7 +133,7 @@ parameters = { "path.user_id" = 42, "query.user_id" = 100 }
     **Type**: `Boolean` or `Array[String]`  
     **Default**: `true` (all warnings enabled)  
 
-    Controls which warnings are displayed during test execution. Warnings highlight issues that could prevent tests from reaching your API's core logic.
+    Warnings flag conditions that may keep tests from exercising core logic. Set `false` to disable all, or list specific warnings to enable only those.
 
     ```toml
     # Disable all warnings

{schemathesis-4.3.15 → schemathesis-4.3.17}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.3.15"
+version = "4.3.17"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]
@@ -27,6 +27,7 @@ classifiers = [
   "Programming Language :: Python :: 3.11",
   "Programming Language :: Python :: 3.12",
   "Programming Language :: Python :: 3.13",
+  "Programming Language :: Python :: 3.14",
   "Programming Language :: Python :: Implementation :: CPython",
   "Programming Language :: Python :: Implementation :: PyPy",
   "Topic :: Software Development :: Testing",
@@ -61,7 +62,7 @@ tests = [
   "Flask>=2.1.1,<3.0",
   "hypothesis-openapi>=0.2,<1; python_version >= '3.10'",
   "pydantic>=1.10.2",
-  "pytest-asyncio>=0.18.0,<1.0",
+  "pytest-asyncio>=1.0,<2.0",
   "pytest-httpserver>=1.0,<2.0",
   "pytest-mock>=3.7.0,<4.0",
   "pytest-trio>=0.8,<1.0",
@@ -72,7 +73,7 @@ tests = [
   "trustme>=0.9.0,<1.0",
 ]
 cov = ["coverage-enable-subprocess", "coverage[toml]>=5.3"]
-bench = ["pytest-codspeed==2.2.1"]
+bench = ["pytest-codspeed==4.2.0"]
 docs = ["mkdocs-material", "mkdocstrings[python]"]
 dev = ["schemathesis[tests,cov,bench,docs]"]
 
@@ -120,14 +121,15 @@ target-version = "py39"
 
 [tool.ruff.lint]
 select = [
-  "E", # pycodestyle errors
-  "W", # pycodestyle warnings
-  "F", # pyflakes
-  "C", # flake8-comprehensions
-  "B", # flake8-bugbear
-  "D", # pydocstyle
-  "T201",
-  "I",
+  "E",     # pycodestyle errors
+  "W",     # pycodestyle warnings
+  "F",     # pyflakes
+  "C",     # flake8-comprehensions
+  "B",     # flake8-bugbear
+  "D",     # pydocstyle
+  "T201",  # flake8-print
+  "I",     # isort
+  "FURB",  # refurb
 ]
 ignore = [
   "E501", # Line too long