[dependabot]

Updates the requirements on schemathesis to permit the latest version.

Release notes

Sourced from schemathesis's releases.

Release 4.27.1

🐛 Fixed

• Decline unbuildable negated bodies instead of raising UnsupportedSchema during negative generation. #4753
• Generate a positive body and isolated negatives when a spec's examples mismatch its schema.
• Generate a valid object body in the coverage phase when all example, examples, and default values are invalid.
• Cover items with a valid value when a conflicting sibling type would otherwise silence it.
• Cover a oneOf branch's own properties even when it can never win exclusivity over a sibling branch.
• Send a valid multipart terminator for an empty multipart body instead of an empty request.
• Do not generate null as an incorrect type for nullable OpenAPI 3.0 properties.

Changelog

Sourced from schemathesis's changelog.

4.27.1 - 2026-09-13

🐛 Fixed

• Decline unbuildable negated bodies instead of raising UnsupportedSchema during negative generation. #4753
• Generate a positive body and isolated negatives when a spec's examples mismatch its schema.
• Generate a valid object body in the coverage phase when all example, examples, and default values are invalid.
• Cover items with a valid value when a conflicting sibling type would otherwise silence it.
• Cover a oneOf branch's own properties even when it can never win exclusivity over a sibling branch.
• Send a valid multipart terminator for an empty multipart body instead of an empty request.
• Do not generate null as an incorrect type for nullable OpenAPI 3.0 properties.

4.27.0 - 2026-09-12

🚀 Added

• Dependency inference links body fields to the collection listing their accepted values.
• Generated data reuses values from list responses, not only single-object ones.
• Generated data reuses values from responses whose schema the spec omits.
• Path parameters take values seen under the same name in earlier responses.
• Integer fields in JSON bodies draw float spellings (2.0) under Open API 3.1 and 3.2.
• Baseline file so CI fails only on failures that are new.
• filter_failure hook to drop check failures by a custom condition. #1792

🔧 Changed

• Examples phase names the parameter it cannot generate and prints its schema.
• missing_test_data warning tips reflect whether links reach the operation and whether stateful testing ran.
• Reports record response bodies larger than 1 MiB as a prefix with the original size.

🏎️ Performance

• Coverage phase ~270x faster on strings declaring format, pattern, and a length bound together. #4593
• Coverage phase up to 6x faster on strings carrying a format and a length bound.
• Strings whose length bound no format value can reach are ruled out without drawing.
• format: date-time values are built to fit a length bound instead of drawn until one fits.
• format: email and format: uri values are built to fit a length bound too.

🐛 Fixed

WFC authentication

• Operations refusing every configured identity never retried without credentials.
• Operations no identity can reach left unauthenticated instead of keeping the one that got furthest.
• Every identity tried before anonymous, spending a short run on credentials that never work.
• Identity escalation stopped by a 404, leaving role-gated operations pinned to the first user.

Others

• No positive cases where a format and a length bound could not both be met. #4592

... (truncated)

Commits

• 122be0b chore: Release 4.27.1
• 5b93328 fix: Do not generate null as an incorrect type for nullable OpenAPI 3.0 pro...
• f53d473 fix: Generate a valid object body in the coverage phase when all example, `...
• 6fdfd31 fix: items with conflicting object type
• d657bec fix: Cover items with a valid value when a conflicting sibling type would...
• c4db417 fix: Decline unbuildable negated bodies instead of raising `UnsupportedSchema...
• 103ef50 fix: Send a valid multipart terminator for an empty multipart body instead of...
• 38d6e8c chore: Update pre-commit
• 4b7e908 fix: Cover a oneOf branch's own properties even when it can never win exclu...
• 9742663 fix: Generate a positive body and isolated negatives when a spec's examples...
• Additional commits viewable in compare view