[dependabot]

Bumps schemathesis from 4.31.1 to 4.32.7.

Release notes

Sourced from schemathesis's releases.

Release 4.32.7

🐛 Fixed

• Compatibility with pytest 9.2.

Release 4.32.6

🏎️ Performance

• Lower memory use for patterns like ^.{0,102400}$.
• Faster positive coverage phase on large nested request bodies.
• Faster coverage phase startup in negative mode for path parameters declared with content.
• Lower coverage phase memory on large $ref-heavy schemas.

🔧 Changed

• Coverage phase covers boundary lengths of password-style patterns like ^(?=.*\d)[a-z\d]*$.
• Coverage phase sends 65,537-character strings to request body fields without maxLength.
• Coverage phase sends 2**63 to numeric fields without an upper bound.
• Coverage phase sends blank values for numeric path and query parameters.

🐛 Fixed

Inferred stateful links

• Links passing resource ids into name parameters like {username}.
• Links filling *_name query filters with an unrelated name field.
• Links filling name parameters with a bare value an unrelated POST returns.
• Links filling *_name query filters with a field naming another resource.
• Missing links for camelCase query parameters like projectName. #5641

GraphQL stateful testing

• Mutation result types like DeleteNote or UpdateNote treated as separate resources.
• Mutations skipped when they wrap results in payload types, such as CreateNotePayload.
• Random ids sent to delete mutations returning Boolean or payloads.
• Multi-word deletes like deleteBookCover linked to the wrong resource.

Data generation

• Valid examples dropped when several discriminator.mapping values point to the same schema. #5631
• Schema examples, multipart filenames and query serialization lost for $ref alias components or $ref siblings.
• Patterns dropped for a hyphen beside a class escape, such as [\w-/].
• Captured values dropped from request bodies missing required fields in the examples phase with fill-missing.

Authentication

• WFC and dynamic cookie auth over WSGI failing for cookie names like user[id] or a@b.
• Python traceback printed for WFC login failures, such as a dropped connection.

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.32.7 - 2026-10-28

🐛 Fixed

• Compatibility with pytest 9.2.

4.32.6 - 2026-10-27

🏎️ Performance

• Lower memory use for patterns like ^.{0,102400}$.
• Faster positive coverage phase on large nested request bodies.
• Faster coverage phase startup in negative mode for path parameters declared with content.
• Lower coverage phase memory on large $ref-heavy schemas.

🔧 Changed

• Coverage phase covers boundary lengths of password-style patterns like ^(?=.*\d)[a-z\d]*$.
• Coverage phase sends 65,537-character strings to request body fields without maxLength.
• Coverage phase sends 2**63 to numeric fields without an upper bound.
• Coverage phase sends blank values for numeric path and query parameters.

🐛 Fixed

Inferred stateful links

• Links passing resource ids into name parameters like {username}.
• Links filling *_name query filters with an unrelated name field.
• Links filling name parameters with a bare value an unrelated POST returns.
• Links filling *_name query filters with a field naming another resource.
• Missing links for camelCase query parameters like projectName. #5641

GraphQL stateful testing

• Mutation result types like DeleteNote or UpdateNote treated as separate resources.
• Mutations skipped when they wrap results in payload types, such as CreateNotePayload.
• Random ids sent to delete mutations returning Boolean or payloads.
• Multi-word deletes like deleteBookCover linked to the wrong resource.

Data generation

• Valid examples dropped when several discriminator.mapping values point to the same schema. #5631
• Schema examples, multipart filenames and query serialization lost for $ref alias components or $ref siblings.
• Patterns dropped for a hyphen beside a class escape, such as [\w-/].
• Captured values dropped from request bodies missing required fields in the examples phase with fill-missing.

Authentication

• WFC and dynamic cookie auth over WSGI failing for cookie names like user[id] or a@b.
• Python traceback printed for WFC login failures, such as a dropped connection.

... (truncated)

Commits

• fa0e32c chore: Release 4.32.7
• 0fc0d51 fix: Compatibility with pytest 9.2
• e67872b chore: Release 4.32.6
• aba767c chore: Coverage phase sends blank values for numeric path and query parameters
• 1d0a880 chore: Coverage phase sends 2**63 to numeric fields without an upper bound
• 65a47dd chore: Coverage phase sends 65,537-character strings to request body fields w...
• 8c990cf fix: Report malformed request body media types in pytest when a valid sibling...
• 84bcc8b docs: Update changelog
• a4adc3c fix: Missing inferred stateful links for camelCase query parameters like `pro...
• 40d1929 fix: Operations unreached under --max-time missing the Time limit reached...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.