[dependabot]

Updates the requirements on schemathesis to permit the latest version.

Release notes

Sourced from schemathesis's releases.

Release 4.31.0

🚀 Added

• Python 3.15 support.
• Tip to check the base URL when the API refuses connections.
• ctx.add_report() for CLI extensions to list their reports in the terminal and HTML report.
• auth.auto-signup config option to disable automatic sign-up.
• Warning when most entries of a dictionary fail the schema of their parameter.
• Warning when --request-timeout or max_response_time is 1000 seconds or more.
• object_level_authorization check: one WFC peer reading an object another peer created.
• Error feedback stops sending unknown body fields after a Jackson Unrecognized field rejection.
• --report html and [reports.html] write an offline HTML report with failures and reproduction commands.

🔧 Changed

• Readable report names in the terminal Reports list, e.g. JUnit instead of JUNIT.
• Summary uses the same warning titles and wording as the warnings block.
• Reject phases.coverage.generation.max-examples; the coverage phase has no case cap.

🐛 Fixed

st fuzz

• Skipping checks for requests sent after the first failure in a scenario.
• Not naming filters that matched no operations.
• Showing "Stop reason: Completed" when no operation was tested.
• Ignoring warnings.fail-on for unmatched filters.
• Summaries not accounting for operations they did not test.
• Summary missing the "Baseline" and "Filtered" counts.
• Suggesting --wait-for-schema on connection errors when it is already set.
• Crashing with Inconsistent data generation when the server stops responding.
• Success icon for an interrupted run.
• Hanging and fuzzing forever when the event consumer raises mid-run.

Output and exit codes

• Double blank lines and trailing spaces in output piped to a file or CI log.
• "No checks ran" given as the skip reason for operations whose requests got no response.
• Phase line showing only passes when the server stopped responding during the phase.
• Phase shown as passed when no checks ran on any of its operations.
• Phase line claiming passed scenarios when no checks ran.
• Final line reporting "No issues found" when no checks ran.
• Final line not naming why the run failed: unsaved baseline or warnings with fail-on.
• Exit code 1 from a fail-on missing-auth warning withdrawn after a later successful response.
• Exit code 1 from a fail-on missing-test-data warning withdrawn during stateful testing.
• API capabilities reported as unsupported when the server is unreachable.

Interrupting with Ctrl-C

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.31.0 - 2026-10-12

🚀 Added

• Python 3.15 support.
• Tip to check the base URL when the API refuses connections.
• ctx.add_report() for CLI extensions to list their reports in the terminal and HTML report.
• auth.auto-signup config option to disable automatic sign-up.
• Warning when most entries of a dictionary fail the schema of their parameter.
• Warning when --request-timeout or max_response_time is 1000 seconds or more.
• object_level_authorization check: one WFC peer reading an object another peer created.
• Error feedback stops sending unknown body fields after a Jackson Unrecognized field rejection.
• --report html and [reports.html] write an offline HTML report with failures and reproduction commands.

🔧 Changed

• Readable report names in the terminal Reports list, e.g. JUnit instead of JUNIT.
• Summary uses the same warning titles and wording as the warnings block.
• Reject phases.coverage.generation.max-examples; the coverage phase has no case cap.

🐛 Fixed

st fuzz

• Skipping checks for requests sent after the first failure in a scenario.
• Not naming filters that matched no operations.
• Showing "Stop reason: Completed" when no operation was tested.
• Ignoring warnings.fail-on for unmatched filters.
• Summaries not accounting for operations they did not test.
• Summary missing the "Baseline" and "Filtered" counts.
• Suggesting --wait-for-schema on connection errors when it is already set.
• Crashing with Inconsistent data generation when the server stops responding.
• Success icon for an interrupted run.
• Hanging and fuzzing forever when the event consumer raises mid-run.

Output and exit codes

• Double blank lines and trailing spaces in output piped to a file or CI log.
• "No checks ran" given as the skip reason for operations whose requests got no response.
• Phase line showing only passes when the server stopped responding during the phase.
• Phase shown as passed when no checks ran on any of its operations.
• Phase line claiming passed scenarios when no checks ran.
• Final line reporting "No issues found" when no checks ran.
• Final line not naming why the run failed: unsaved baseline or warnings with fail-on.
• Exit code 1 from a fail-on missing-auth warning withdrawn after a later successful response.
• Exit code 1 from a fail-on missing-test-data warning withdrawn during stateful testing.
• API capabilities reported as unsupported when the server is unreachable.

Interrupting with Ctrl-C

... (truncated)

Commits

• 54c3445 chore: Release 4.31.0
• 063610e build: Replace 3.14t with 3.15t in tests
• 44b2d00 fix: HTML report timeline hiding failure ticks for runs with more than 50 fai...
• 6c037c3 feat: Python 3.15 support
• d41d101 chore: Drop Python 3.10 support
• 7e03889 fix: HTML report "Copy" button shifting the command's horizontal scroll when ...
• ece3011 fix: --auth-wfc-user silently ignored when no Web Fuzzing Commons auth file...
• bf5021f fix: --auth-wfc discarding peers, refresh_interval and user set under...
• d187e7a fix: Hanging and fuzzing forever when the event consumer raises mid-run
• 8637386 test(docs): Run tests against config examples in guides
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #81.