schemathesis 4.3.9__tar.gz → 4.3.11__tar.gz

{schemathesis-4.3.9 → schemathesis-4.3.11}/CHANGELOG.md

@@ -1,6 +1,31 @@
 # Changelog
 
-## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.3.9...HEAD) - TBD
+## [Unreleased](https://github.com/schemathesis/schemathesis/compare/v4.3.11...HEAD) - TBD
+
+## [4.3.11](https://github.com/schemathesis/schemathesis/compare/v4.3.10...v4.3.11) - 2025-10-24
+
+### :bug: Fixed
+
+- Do not conservatively consider all recursive references as infinite ones in the examples phase.
+- Mishandled a case of infinite recursion in the example phase.
+- Improve API spec detection for malformed JSON inputs.
+- Internal error on empty `allOf` in the examples phase.
+
+### :wrench: Changed
+
+- Make `tomli` optional for Python 3.11+. [#3199](https://github.com/schemathesis/schemathesis/issues/3199)
+
+## [4.3.10](https://github.com/schemathesis/schemathesis/compare/v4.3.9...v4.3.10) - 2025-10-22
+
+### :bug: Fixed
+
+- Internal error when generating invalid type in the coverage phase.
+- Internal error when generating valid instance against an array of types in the coverage phase. [#3194](https://github.com/schemathesis/schemathesis/issues/3194)
+- Missing required request body for schemas without validation keywords.
+
+### :wrench: Changed
+
+- Improve resources inference.
 
 ## [4.3.9](https://github.com/schemathesis/schemathesis/compare/v4.3.8...v4.3.9) - 2025-10-21
 
@@ -222,7 +247,7 @@
 - False positive `API accepted schema-violating request` caused by passing security-related header via CLI during the stateful phase.
 
 ## [4.0.25](https://github.com/schemathesis/schemathesis/compare/v4.0.24...v4.0.25) - 2025-08-10
-  
+
 ### :bug: Fixed
 
 - `workers = "auto"` being incorrectly rejected in configuration files. [#3015](https://github.com/schemathesis/schemathesis/issues/3015)
@@ -304,7 +329,7 @@ These improvements come from removing unnecessary memory allocations in unnecess
 ### :bug: Fixed
 
 - Generating negative test cases incorrectly marked as invalid if `anyOf` or `oneOf` are present. [#2975](https://github.com/schemathesis/schemathesis/issues/2975)
-- Set correct data generation mode for stateful test cases if after adding stateful data, a negative test case becomes positive. [#2983](https://github.com/schemathesis/schemathesis/issues/2983) 
+- Set correct data generation mode for stateful test cases if after adding stateful data, a negative test case becomes positive. [#2983](https://github.com/schemathesis/schemathesis/issues/2983)
 
 ## [4.0.16](https://github.com/schemathesis/schemathesis/compare/v4.0.15...v4.0.16) - 2025-07-31
 
@@ -363,7 +388,7 @@ These improvements come from removing unnecessary memory allocations in unnecess
 
 ### :wrench: Changed
 
-- Display cURL code samples on more network errors. [#2940](https://github.com/schemathesis/schemathesis/issues/2940) 
+- Display cURL code samples on more network errors. [#2940](https://github.com/schemathesis/schemathesis/issues/2940)
 
 ## [4.0.9](https://github.com/schemathesis/schemathesis/compare/v4.0.8...v4.0.9) - 2025-07-13
 
@@ -375,7 +400,7 @@ These improvements come from removing unnecessary memory allocations in unnecess
 
 - Do not display API probing result in the test phases summary.
 - Do not display API probing errors in CLI output. Treat errors as a missing capability.
-- Display cURL code samples on more network errors. [#2940](https://github.com/schemathesis/schemathesis/issues/2940) 
+- Display cURL code samples on more network errors. [#2940](https://github.com/schemathesis/schemathesis/issues/2940)
 
 ## [4.0.8](https://github.com/schemathesis/schemathesis/compare/v4.0.7...v4.0.8) - 2025-07-12
 
@@ -452,7 +477,7 @@ These improvements come from removing unnecessary memory allocations in unnecess
 
 ### :bug: Fixed
 
-- **CLI**: Combining `--include-*` & `--exclude-*`. [#2894](https://github.com/schemathesis/schemathesis/issues/2894) 
+- **CLI**: Combining `--include-*` & `--exclude-*`. [#2894](https://github.com/schemathesis/schemathesis/issues/2894)
 - Combining CLI filter options with config file-based filtering.
 
 ## [4.0.0](https://github.com/schemathesis/schemathesis/compare/v4.0.0-beta.1...v4.0.0) - 2025-06-10
@@ -474,7 +499,7 @@ Check the [Migration Guide](https://github.com/schemathesis/schemathesis/blob/ma
 - Restore `Case.formatted_path`.
 - Update serialization error messages.
 - Update documentation links in error messages.
-- Improved failure messages for `ignored_auth`. [#2779](https://github.com/schemathesis/schemathesis/issues/2779) 
+- Improved failure messages for `ignored_auth`. [#2779](https://github.com/schemathesis/schemathesis/issues/2779)
 - Do not show the "Missing test data" warning if stateful testing has non-404 responses. [#2795](https://github.com/schemathesis/schemathesis/issues/2795)
 - Restore support for validating `requests` / `httpx` / `werkzeug` responses in `validate_response` and `is_response_valid`.
 - Rename `is_response_valid` to `is_valid_response` for consistency with other functions in the codebase.
@@ -531,7 +556,7 @@ This should be the final alpha release. Going forward, I'll focus on documentati
 
 ### :rocket: Added
 
-- A way to configure status codes for the `not_a_server_error` check. [#2539](https://github.com/schemathesis/schemathesis/issues/2539) 
+- A way to configure status codes for the `not_a_server_error` check. [#2539](https://github.com/schemathesis/schemathesis/issues/2539)
 - `@schemathesis.serializer` decorator as a way to serialize data of media types not supported by Schemathesis.
 
 ### :bug: Fixed
@@ -600,7 +625,7 @@ headers = { Authorization = "Bearer ${API_TOKEN}" }
 
 ### :bug: Fixed
 
-- **Coverage Phase**: 
+- **Coverage Phase**:
     - Do not generate empty path parameters.
     - Skip empty string examples for path parameters.
     - Generate default values if examples are incorrect or inappropriate for their location.
@@ -617,7 +642,7 @@ headers = { Authorization = "Bearer ${API_TOKEN}" }
 ### :wrench: Changed
 
 - Enable all available checks by default.
-- Do not fallback to GraphQL loading if schema location ends with `openapi.json` and similar filenames. [#2757](https://github.com/schemathesis/schemathesis/issues/2757) 
+- Do not fallback to GraphQL loading if schema location ends with `openapi.json` and similar filenames. [#2757](https://github.com/schemathesis/schemathesis/issues/2757)
 - **INTERNAL**: Ignore deprecation warnings from `jsonschema`.
 
 ### :fire: Removed
@@ -1649,7 +1674,7 @@ and complete changelog will follow.
 -   `APIStateMachine.format_rules` method to format transition rules in
     a human-readable format.
 
-``` 
+```
 POST /user
 └── 201
     ├── GET /users/{ids}
@@ -2529,7 +2554,7 @@ def test_api(case):
     generate unique test cases only. This feature is also available as a
     hook in `schemathesis.contrib.unique_data`.
 
--   A few decorators & functions that provide a simpler API to extend Schemathesis:  
+-   A few decorators & functions that provide a simpler API to extend Schemathesis:
     -   `schemathesis.auth()` for authentication providers;
     -   `schemathesis.check` for checks;
     -   `schemathesis.hook` & `BaseSchema.hook` for hooks;

{schemathesis-4.3.9 → schemathesis-4.3.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: schemathesis
-Version: 4.3.9
+Version: 4.3.11
 Summary: Property-based testing framework for Open API and GraphQL based apps
 Project-URL: Documentation, https://schemathesis.readthedocs.io/en/stable/
 Project-URL: Changelog, https://github.com/schemathesis/schemathesis/blob/master/CHANGELOG.md
@@ -46,7 +46,7 @@ Requires-Dist: pyyaml<7.0,>=5.1
 Requires-Dist: requests<3,>=2.22
 Requires-Dist: rich>=13.9.4
 Requires-Dist: starlette-testclient<1,>=0.4.1
-Requires-Dist: tomli>=2.2.1
+Requires-Dist: tomli>=2.2.1; python_version < '3.11'
 Requires-Dist: typing-extensions>=4.12.2
 Requires-Dist: werkzeug<4,>=0.16.0
 Provides-Extra: bench

{schemathesis-4.3.9 → schemathesis-4.3.11}/docs/reference/hooks.md

@@ -16,12 +16,13 @@ Hooks that execute during schema loading and operation initialization.
 
     All schema-level hooks return `None` and modify their arguments in-place.
 
-## Data-Generation Hooks
+## Data Generation Hooks
 
 Control how test data is generated for each request component.
 
 | Hook Pattern | Signature | Purpose | Return |
 |--------------|-----------|---------|---------|
+| **before_generate_{component}** | `(ctx, strategy: SearchStrategy) -> SearchStrategy` | Modify generation strategy | Modified strategy |
 | **filter_{component}** | `(ctx, value: Any) -> bool` | Exclude generated values | `True` to keep, `False` to reject |
 | **map_{component}** | `(ctx, value: Any) -> Any` | Transform generated values | Modified value |
 | **flatmap_{component}** | `(ctx, value: Any) -> SearchStrategy` | Generate dependent values | New strategy based on input |

{schemathesis-4.3.9 → schemathesis-4.3.11}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "schemathesis"
-version = "4.3.9"
+version = "4.3.11"
 description = "Property-based testing framework for Open API and GraphQL based apps"
 keywords = ["pytest", "hypothesis", "openapi", "graphql", "testing"]
 authors = [{ name = "Dmitry Dygalo", email = "dmitry@dygalo.dev" }]
@@ -49,7 +49,7 @@ dependencies = [
   "requests>=2.22,<3",
   "rich>=13.9.4",
   "starlette-testclient>=0.4.1,<1",
-  "tomli>=2.2.1",
+  "tomli>=2.2.1; python_version < '3.11'",
   "typing-extensions>=4.12.2",
   "werkzeug>=0.16.0,<4",
 ]

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/cli/commands/__init__.py

@@ -1,10 +1,10 @@
 from __future__ import annotations
 
+import sys
 from dataclasses import dataclass
 from typing import Any
 
 import click
-from tomli import TOMLDecodeError
 
 from schemathesis.cli.commands.data import Data
 from schemathesis.cli.commands.run import run as run_command
@@ -16,6 +16,11 @@ from schemathesis.config import ConfigError, SchemathesisConfig
 from schemathesis.core.errors import HookError, format_exception
 from schemathesis.core.version import SCHEMATHESIS_VERSION
 
+if sys.version_info < (3, 11):
+    from tomli import TOMLDecodeError
+else:
+    from tomllib import TOMLDecodeError
+
 CONTEXT_SETTINGS = {"help_option_names": ["-h", "--help"]}
 
 

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/cli/commands/run/loaders.py

@@ -8,6 +8,7 @@ from __future__ import annotations
 
 import os
 import warnings
+from json import JSONDecodeError
 from typing import TYPE_CHECKING, Any, Callable
 
 from schemathesis import graphql, openapi
@@ -35,7 +36,10 @@ def should_try_more(exc: LoaderError) -> bool:
     import requests
     from yaml.reader import ReaderError
 
-    if isinstance(exc.__cause__, ReaderError) and "characters are not allowed" in str(exc.__cause__):
+    if (isinstance(exc.__cause__, ReaderError) and "characters are not allowed" in str(exc.__cause__)) or (
+        isinstance(exc.__cause__, JSONDecodeError)
+        and ('"swagger"' in exc.__cause__.doc or '"openapi"' in exc.__cause__.doc)
+    ):
         return False
 
     # We should not try other loaders for cases when we can't even establish connection

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/config/__init__.py

@@ -1,12 +1,11 @@
 from __future__ import annotations
 
 import os
+import sys
 from dataclasses import dataclass
 from os import PathLike
 from random import Random
 
-import tomli
-
 from schemathesis.config._checks import (
     CheckConfig,
     ChecksConfig,
@@ -29,6 +28,11 @@ from schemathesis.config._phases import (
 from schemathesis.config._projects import ProjectConfig, ProjectsConfig, SchemathesisWarning, get_workers_count
 from schemathesis.config._report import DEFAULT_REPORT_DIRECTORY, ReportConfig, ReportFormat, ReportsConfig
 
+if sys.version_info < (3, 11):
+    import tomli
+else:
+    import tomllib as tomli
+
 __all__ = [
     "SchemathesisConfig",
     "ConfigError",

schemathesis-4.3.11/src/schemathesis/core/jsonschema/keywords.py

@@ -0,0 +1,40 @@
+ALL_KEYWORDS = frozenset(
+    {
+        "additionalItems",
+        "additionalProperties",
+        "allOf",
+        "anyOf",
+        "const",
+        "contains",
+        "contentEncoding",
+        "contentMediaType",
+        "dependencies",
+        "enum",
+        "else",
+        "exclusiveMaximum",
+        "exclusiveMinimum",
+        "format",
+        "if",
+        "items",
+        "maxItems",
+        "maxLength",
+        "maxProperties",
+        "maximum",
+        "minItems",
+        "minLength",
+        "minProperties",
+        "minimum",
+        "multipleOf",
+        "not",
+        "oneOf",
+        "pattern",
+        "patternProperties",
+        "properties",
+        "propertyNames",
+        "$ref",
+        "required",
+        "then",
+        "type",
+        "uniqueItems",
+    }
+)

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/generation/coverage.py

@@ -8,6 +8,7 @@ from functools import lru_cache, partial
 from itertools import combinations
 
 from schemathesis.core.jsonschema.bundler import BUNDLE_STORAGE_KEY
+from schemathesis.core.jsonschema.keywords import ALL_KEYWORDS
 
 try:
     from json.encoder import _make_iterencode  # type: ignore[attr-defined]
@@ -74,6 +75,14 @@ STRATEGIES_FOR_TYPE = {
     "array": ARRAY_STRATEGY,
     "object": OBJECT_STRATEGY,
 }
+
+
+def get_strategy_for_type(ty: str | list[str]) -> st.SearchStrategy:
+    if isinstance(ty, str):
+        return STRATEGIES_FOR_TYPE[ty]
+    return st.one_of(STRATEGIES_FOR_TYPE[t] for t in ty if t in STRATEGIES_FOR_TYPE)
+
+
 FORMAT_STRATEGIES = {**BUILT_IN_STRING_FORMATS, **get_default_format_strategies(), **STRING_FORMATS}
 
 UNKNOWN_PROPERTY_KEY = "x-schemathesis-unknown-property"
@@ -269,11 +278,11 @@ class CoverageContext:
         if isinstance(schema, bool):
             return 0
         keys = sorted([k for k in schema if not k.startswith("x-") and k not in ["description", "example", "examples"]])
-        if keys == ["type"] and isinstance(schema["type"], str) and schema["type"] in STRATEGIES_FOR_TYPE:
-            return cached_draw(STRATEGIES_FOR_TYPE[schema["type"]])
+        if keys == ["type"]:
+            return cached_draw(get_strategy_for_type(schema["type"]))
         if keys == ["format", "type"]:
             if schema["type"] != "string":
-                return cached_draw(STRATEGIES_FOR_TYPE[schema["type"]])
+                return cached_draw(get_strategy_for_type(schema["type"]))
             elif schema["format"] in FORMAT_STRATEGIES:
                 return cached_draw(FORMAT_STRATEGIES[schema["format"]])
         if (keys == ["maxLength", "minLength", "type"] or keys == ["maxLength", "type"]) and schema["type"] == "string":
@@ -505,12 +514,14 @@ def cover_schema_iter(
             # Can't resolve a reference - at this point, we can't generate anything useful as `$ref` is in the current schema root
             return
 
-    if schema == {} or schema is True:
+    if schema is True:
         types = ["null", "boolean", "string", "number", "array", "object"]
         schema = {}
     elif schema is False:
         types = []
         schema = {"not": {}}
+    elif not any(k in ALL_KEYWORDS for k in schema):
+        types = ["null", "boolean", "string", "number", "array", "object"]
     else:
         types = schema.get("type", [])
     push_examples_to_properties(schema)
@@ -1320,7 +1331,7 @@ def _negative_type(
     }.get(ctx.location)
 
     if "number" in types:
-        del strategies["integer"]
+        strategies.pop("integer", None)
     if "integer" in types:
         strategies["number"] = FLOAT_STRATEGY.filter(_is_non_integer_float)
     if ctx.location == ParameterLocation.QUERY:

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/generation/hypothesis/builder.py

@@ -35,7 +35,7 @@ from schemathesis.core.transport import prepare_urlencoded
 from schemathesis.core.validation import has_invalid_characters, is_latin_1_encodable
 from schemathesis.generation import GenerationMode, coverage
 from schemathesis.generation.case import Case
-from schemathesis.generation.hypothesis import examples, setup, strategies
+from schemathesis.generation.hypothesis import examples, setup
 from schemathesis.generation.hypothesis.examples import add_single_example
 from schemathesis.generation.hypothesis.given import GivenInput
 from schemathesis.generation.meta import (
@@ -112,9 +112,7 @@ def create_test(
         **config.as_strategy_kwargs,
     }
     generation = config.project.generation_for(operation=operation)
-    strategy = strategies.combine(
-        [operation.as_strategy(generation_mode=mode, **strategy_kwargs) for mode in generation.modes]
-    )
+    strategy = st.one_of(operation.as_strategy(generation_mode=mode, **strategy_kwargs) for mode in generation.modes)
 
     hypothesis_test = create_base_test(
         test_function=test_func,

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/openapi/loaders.py

@@ -303,10 +303,11 @@ def _load_yaml(content: str) -> dict[str, Any]:
     try:
         return deserialize_yaml(content)
     except yaml.YAMLError as exc:
-        kind = LoaderErrorKind.SYNTAX_ERROR
-        message = SCHEMA_SYNTAX_ERROR
-        extras = [entry for entry in str(exc).splitlines() if entry]
-        raise LoaderError(kind, message, extras=extras) from exc
+        raise LoaderError(
+            LoaderErrorKind.SYNTAX_ERROR,
+            SCHEMA_SYNTAX_ERROR,
+            extras=[entry for entry in str(exc).splitlines() if entry],
+        ) from exc
 
 
 SCHEMA_INVALID_ERROR = "The provided API schema does not appear to be a valid OpenAPI schema"

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/schemas.py

@@ -16,6 +16,8 @@ from typing import (
 )
 from urllib.parse import quote, unquote, urljoin, urlsplit, urlunsplit
 
+from hypothesis import strategies as st
+
 from schemathesis import transport
 from schemathesis.config import ProjectConfig
 from schemathesis.core import NOT_SET, NotSet, media_types
@@ -25,7 +27,6 @@ from schemathesis.core.result import Ok, Result
 from schemathesis.core.transport import Response
 from schemathesis.generation import GenerationMode
 from schemathesis.generation.case import Case
-from schemathesis.generation.hypothesis import strategies
 from schemathesis.generation.hypothesis.given import GivenInput, given_proxy
 from schemathesis.generation.meta import CaseMetadata
 from schemathesis.hooks import HookDispatcherMark, _should_skip_hook
@@ -458,7 +459,7 @@ class BaseSchema(Mapping):
             for operation in self.get_all_operations()
             if isinstance(operation, Ok)
         ]
-        return strategies.combine(_strategies)
+        return st.one_of(_strategies)
 
     def find_operation_by_label(self, label: str) -> APIOperation | None:
         raise NotImplementedError
@@ -500,7 +501,7 @@ class APIOperationMap(Mapping):
         _strategies = [
             operation.as_strategy(generation_mode=generation_mode, **kwargs) for operation in self._data.values()
         ]
-        return strategies.combine(_strategies)
+        return st.one_of(_strategies)
 
 
 P = TypeVar("P", bound=OperationParameter)

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/specs/openapi/adapter/security.py

@@ -7,7 +7,7 @@ if TYPE_CHECKING:
     from schemathesis.core.compat import RefResolver
     from schemathesis.specs.openapi.adapter.protocol import SpecificationAdapter
 
-ORIGINAL_SECURITY_TYPE_KEY = "x-original-securuty-type"
+ORIGINAL_SECURITY_TYPE_KEY = "x-original-security-type"
 
 
 @dataclass

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/specs/openapi/examples.py

@@ -12,7 +12,6 @@ from hypothesis_jsonschema import from_schema
 from schemathesis.config import GenerationConfig
 from schemathesis.core.compat import RefResolutionError, RefResolver
 from schemathesis.core.errors import InfiniteRecursiveReference, UnresolvableReference
-from schemathesis.core.jsonschema import references
 from schemathesis.core.jsonschema.bundler import BUNDLE_STORAGE_KEY
 from schemathesis.core.transforms import deepclone
 from schemathesis.core.transport import DEFAULT_RESPONSE_TIMEOUT
@@ -216,11 +215,11 @@ def _resolve_bundled(
         if isinstance(reference, str):
             # Check if this reference is already in the current path
             if reference in reference_path:
-                # Try to remove recursive references to avoid infinite recursion
-                remaining_references = references.sanitize(schema)
-                if reference in remaining_references:
-                    cycle = list(reference_path[reference_path.index(reference) :])
-                    raise InfiniteRecursiveReference(reference, cycle)
+                # Real infinite recursive references are caught at the bundling stage.
+                # This recursion happens because of how the example phase generates data - it explores everything,
+                # so it is the easiest way to break such cycles
+                cycle = list(reference_path[reference_path.index(reference) :])
+                raise InfiniteRecursiveReference(reference, cycle)
 
             new_path = reference_path + (reference,)
 
@@ -238,7 +237,11 @@ def _expand_subschemas(
     *, schema: dict[str, Any] | bool, resolver: RefResolver, reference_path: tuple[str, ...]
 ) -> Generator[tuple[dict[str, Any] | bool, tuple[str, ...]], None, None]:
     """Expand schema and all its subschemas."""
-    schema, current_path = _resolve_bundled(schema, resolver, reference_path)
+    try:
+        schema, current_path = _resolve_bundled(schema, resolver, reference_path)
+    except InfiniteRecursiveReference:
+        return
+
     yield (schema, current_path)
 
     if isinstance(schema, dict):
@@ -250,13 +253,19 @@ def _expand_subschemas(
                     yield (subschema, current_path)
 
         # For allOf, merge all alternatives
-        if "allOf" in schema:
+        if "allOf" in schema and schema["allOf"]:
             subschema = deepclone(schema["allOf"][0])
-            subschema, _ = _resolve_bundled(subschema, resolver, current_path)
+            try:
+                subschema, expanded_path = _resolve_bundled(subschema, resolver, current_path)
+            except InfiniteRecursiveReference:
+                return
 
             for sub in schema["allOf"][1:]:
                 if isinstance(sub, dict):
-                    sub, _ = _resolve_bundled(sub, resolver, current_path)
+                    try:
+                        sub, _ = _resolve_bundled(sub, resolver, current_path)
+                    except InfiniteRecursiveReference:
+                        return
                     for key, value in sub.items():
                         if key == "properties":
                             subschema.setdefault("properties", {}).update(value)
@@ -269,7 +278,7 @@ def _expand_subschemas(
                         else:
                             subschema[key] = value
 
-            yield (subschema, current_path)
+            yield (subschema, expanded_path)
 
 
 def extract_inner_examples(examples: dict[str, Any] | list, schema: BaseOpenAPISchema) -> Generator[Any, None, None]:
@@ -353,7 +362,10 @@ def extract_from_schema(
 ) -> Generator[Any, None, None]:
     """Extract all examples from a single schema definition."""
     # This implementation supports only `properties` and `items`
-    schema, current_path = _resolve_bundled(schema, resolver, reference_path)
+    try:
+        schema, current_path = _resolve_bundled(schema, resolver, reference_path)
+    except InfiniteRecursiveReference:
+        return
 
     if "properties" in schema:
         variants = {}

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/specs/openapi/stateful/__init__.py

@@ -15,7 +15,6 @@ from schemathesis.core.transforms import UNRESOLVABLE
 from schemathesis.engine.recorder import ScenarioRecorder
 from schemathesis.generation import GenerationMode
 from schemathesis.generation.case import Case
-from schemathesis.generation.hypothesis import strategies
 from schemathesis.generation.meta import ComponentInfo, TestPhase
 from schemathesis.generation.stateful import STATEFUL_TESTS_LABEL
 from schemathesis.generation.stateful.state_machine import APIStateMachine, StepInput, StepOutput, _normalize_name
@@ -277,8 +276,8 @@ def into_step_input(
 
             is_applied = bool(kwargs)
 
-            cases = strategies.combine(
-                [target.as_strategy(generation_mode=mode, phase=TestPhase.STATEFUL, **kwargs) for mode in modes]
+            cases = st.one_of(
+                target.as_strategy(generation_mode=mode, phase=TestPhase.STATEFUL, **kwargs) for mode in modes
             )
             case = draw(cases)
             if (

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/specs/openapi/stateful/dependencies/naming.py

@@ -2,16 +2,35 @@ from __future__ import annotations
 
 
 def from_parameter(parameter: str, path: str) -> str | None:
-    # TODO: support other naming patterns
-    # Named like "userId" -> look for "User" resource
-    if parameter.endswith("Id") and len(parameter) > 2:
-        return to_pascal_case(parameter[:-2])
-    # Named like "user_id" -> look for "User" resource
-    elif parameter.endswith("_id"):
-        return to_pascal_case(parameter[:-3])
-    # Just "id" -> infer from path context
-    elif parameter == "id":
+    parameter = parameter.strip()
+    lower = parameter.lower()
+
+    if lower == "id":
         return from_path(path, parameter_name=parameter)
+
+    # Capital-sensitive
+    capital_suffixes = ("Id", "Uuid", "Guid")
+    for suffix in capital_suffixes:
+        if parameter.endswith(suffix):
+            prefix = parameter[: -len(suffix)]
+            if len(prefix) >= 2:
+                return to_pascal_case(prefix)
+
+    # Snake_case (case-insensitive is fine here)
+    snake_suffixes = ("_guid", "_uuid", "_id", "-guid", "-uuid", "-id")
+    for suffix in snake_suffixes:
+        if lower.endswith(suffix):
+            prefix = parameter[: -len(suffix)]
+            if len(prefix) >= 2:
+                return to_pascal_case(prefix)
+
+    # Special cases that need exact match
+    # Twilio-style, capital S
+    if parameter.endswith("Sid"):
+        prefix = parameter[:-3]
+        if len(prefix) >= 2:
+            return to_pascal_case(prefix)
+
     return None
 
 
@@ -335,8 +354,12 @@ def to_plural(word: str) -> str:
 
 
 def to_pascal_case(text: str) -> str:
-    parts = text.replace("-", "_").split("_")
-    return "".join(word.capitalize() for word in parts if word)
+    # snake_case/kebab-case - split and capitalize each word
+    if "_" in text or "-" in text:
+        parts = text.replace("-", "_").split("_")
+        return "".join(word.capitalize() for word in parts if word)
+    # camelCase - just uppercase first letter, preserve the rest
+    return text[0].upper() + text[1:] if text else text
 
 
 def to_snake_case(text: str) -> str:

{schemathesis-4.3.9 → schemathesis-4.3.11}/src/schemathesis/specs/openapi/stateful/dependencies/schemas.py

@@ -5,7 +5,7 @@ from typing import TYPE_CHECKING, Any, Callable, Mapping
 
 from schemathesis.core.jsonschema import ALL_KEYWORDS
 from schemathesis.core.jsonschema.bundler import BUNDLE_STORAGE_KEY, bundle
-from schemathesis.core.jsonschema.types import JsonSchema, JsonSchemaObject
+from schemathesis.core.jsonschema.types import JsonSchema, JsonSchemaObject, get_type
 from schemathesis.core.transforms import encode_pointer
 from schemathesis.specs.openapi.adapter.parameters import resource_name_from_ref
 from schemathesis.specs.openapi.adapter.references import maybe_resolve
@@ -425,7 +425,7 @@ def _detect_externally_tagged_pattern(schema: Mapping[str, Any], path: str) -> s
         if name.lower() not in possible_names:
             continue
 
-        if isinstance(subschema, dict):
+        if isinstance(subschema, dict) and "object" in get_type(subschema):
             return name
 
     return None

schemathesis-4.3.11/test/__snapshots__/test_dereferencing/test_multiple_hops_references[paths0-components0].raw

@@ -0,0 +1,40 @@
+Exit code: 0
+---
+Stdout:
+Schemathesis dev
+━━━━━━━━━━━━━━━━
+
+
+ ✅  Loaded specification from /tmp/schema.json (in 0.00s)
+
+     Base URL:         http://127.0.0.1/api
+     Specification:    Open API 3.0.2
+     Operations:       1 selected / 1 total
+
+
+ ✅  API capabilities:
+
+     Supports NULL byte in headers:    ✘
+
+ ✅  Examples (in 0.00s)
+
+     ✅ 1 passed
+
+=================================== SUMMARY ====================================
+
+API Operations:
+  Selected: 1/1
+  Tested: 1
+
+Test Phases:
+  ✅ Examples
+  ⏭  Coverage (disabled)
+  ⏭  Fuzzing (disabled)
+  ⏭  Stateful (disabled)
+
+Test cases:
+  N generated, N passed
+
+Seed: 42
+
+=========================== No issues found in 1.00s ===========================