Schemathesis

Latest version: v3.39.5

Safety actively analyzes 693883 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 53

4.53.2

85d02df Flaky test for threaded code
932577a Unhandled too long paths in CLI

Chores and Improvements :wrench:

<details><summary>e1810a8 Remove git depth limit</summary>

This is what is causing the releases to have a single entry

</details>

Other :package:

4.0

:bug: Fixed

- **CLI**: Do not duplicate the error message in the output when the error has no traceback and the `--show-trace` option is provided.
- **Open API**: Internal error on path templates that contain `.` inside path parameters.
- **Open API**: YAML serialization of data generated for schemas with `format: binary`.
- Create parent directories when saving JUnit XML reports and other file-based output. 1995
- Internal error when an API operation contains multiple parameters with the same name and some of them contain the `examples` keyword.
- Internal error during query parameter generation on schemas that do not contain the `type` keyword.
- Example generation for request body parameters using `$ref`.
- Generating examples for properties that have deeply nested `$ref`.
- Generating examples for properties with boolean sub-schemas.
- Validating responses with boolean sub-schemas on Open API 3.1.
- `TypeError` on non-string `pattern` values. This could happen on values in YAML, such that when not quoted, they are parsed
as non-strings.
- Testing examples requiring unsupported payload media types resulted in an internal error. These are now correctly reported as errors
- Internal error on unsupported regular expressions in inside properties during example generation.
- Missing XML definitions when the media type contains options like `application/xml; charset=utf-8`.
- Unhandled timeout while reading the response payload.
- Internal error when the header example in the schema is not a valid header.
- Handle `KeyError` during state machine creation.
- Deduplicate network errors that contain unique URLs in their messages.
- Not reporting multiple errors of different kinds at the same API operation.
- Group similar errors within the same API operation.

3.39.5

:rocket: Added

- Experimental `unsupported_method` check.

:wrench: Changed

- Always expect HTTP 401 for the `Authorization` header in the experimental `missing_required_header` check.
- Do not make HEAD requests for "Unspecified HTTP method".

3.39.4

:bug: Fixed

- `TypeError` on extracting explicit examples.

3.39.3

:bug: Fixed

- Code sample containing incorrect HTTP method for the `Unspecified HTTP method` case in the coverage phase.
- `TypeError` on some `x-www-form-urlencoded` payloads during the coverage phase.

3.39.2

:wrench: Changed

- Update the upper bound on `pytest-subtests` to `<0.15.0`.
- Adjust JUnit XML output so Jenkins properly displays it.

:bug: Fixed

- Do not report 5XX responses in `use_after_free` as they don't indicate the presence of the previously deleted resource.
- Deduplicate test cases in JUnit XML report.

:racing_car: Performance

- Faster iteration over API operations.

Page 1 of 53

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.