chore(deps-dev): bump schemathesis from 4.16.1 to 4.25.0 in /clients/python

[dependabot]

Bumps schemathesis from 4.16.1 to 4.25.0.

Release notes

Sourced from schemathesis's releases.

Release 4.25.0

🚀 Added

• Report filter expressions that match no API operations, with the closest match as a suggestion.
• allow_header_conformance check comparing the Allow header against the methods declared in the schema.

🐛 Fixed

Data generation

• Slow generation for a grouped or anchored pattern under a length bound.
• Generation hanging on a pattern whose repeated group cannot fit an exact length bound.
• Strings longer than a single-character pattern like ^[a-z]$ allows when maxLength is set.
• Values violating a pattern with possessive quantifiers like 0++0 when a length bound is set.
• Internal error generating values for a pattern naming characters outside generation.codec.
• Generate values for patterns using Unicode property escapes like \p{L}.
• Generate values for patterns using named capture groups like (?<name>...).
• Generate values for the other anyOf branches when one names an ungeneratable pattern.
• Keep a pattern the API enforces when Python cannot read it.
• Honor format when generating string values for Open API 3.1.
• Generate hostname and idn-hostname values that validators accept.
• Generate string values satisfying every pattern and format in a conjunction.
• Generate strings honoring contentEncoding and contentMediaType under Draft 7.
• Generate sendable header and cookie values for schemas with keywords beyond type.
• Generate valid data for oneOf / anyOf branches whose discriminator property is nullable.
• Unsatisfiable negative tests for operations whose path parameters have no constraint to violate.
• Name the API operation that cannot be generated when its schema is unsatisfiable.
• Hypothesis warning about an overly large representation when generating unrestricted JSON values.
• Send true/false/null for booleans and nulls nested in array query parameters.
• Negative test data differing between runs, and sometimes failing to generate, for the same seed.
• Bodies exceeding maxProperties when a captured resource value is injected.

Schema handling

• Resolve a reference naming the schema's own $id in place, without fetching it.
• Schema error on references inside a schema whose $id is a bare fragment like #/definitions/text.
• Intermittent "Path parameter is not defined" on specs split across many external files. #4414
• Report schemas rejected by their JSON Schema draft as a schema error.
• Report a pattern the validator cannot compile as an invalid regular expression.
• Internal warning text shown for unreadable patternProperties regexes and patterns containing a quote.
• Run aborting with an internal error on non-string parameter names like true.
• Internal error on truncated runtime expressions like $response. in Open API links.
• Read unquoted on, off, yes and no in YAML documents as strings, per YAML 1.2.

Coverage phase

• Stalling and using gigabytes on a pattern with optional parts and maxLength.
• Endless recursion and runtime errors on reference cycles through allOf, oneOf, or anyOf.
• Rewriting booleans in a schema's own example into strings for every later case.

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.25.0 - 2026-08-21

🚀 Added

• Report filter expressions that match no API operations, with the closest match as a suggestion.
• allow_header_conformance check comparing the Allow header against the methods declared in the schema.

🐛 Fixed

Data generation

• Slow generation for a grouped or anchored pattern under a length bound.
• Generation hanging on a pattern whose repeated group cannot fit an exact length bound.
• Strings longer than a single-character pattern like ^[a-z]$ allows when maxLength is set.
• Values violating a pattern with possessive quantifiers like 0++0 when a length bound is set.
• Internal error generating values for a pattern naming characters outside generation.codec.
• Generate values for patterns using Unicode property escapes like \p{L}.
• Generate values for patterns using named capture groups like (?<name>...).
• Generate values for the other anyOf branches when one names an ungeneratable pattern.
• Keep a pattern the API enforces when Python cannot read it.
• Honor format when generating string values for Open API 3.1.
• Generate hostname and idn-hostname values that validators accept.
• Generate string values satisfying every pattern and format in a conjunction.
• Generate strings honoring contentEncoding and contentMediaType under Draft 7.
• Generate sendable header and cookie values for schemas with keywords beyond type.
• Generate valid data for oneOf / anyOf branches whose discriminator property is nullable.
• Unsatisfiable negative tests for operations whose path parameters have no constraint to violate.
• Name the API operation that cannot be generated when its schema is unsatisfiable.
• Hypothesis warning about an overly large representation when generating unrestricted JSON values.
• Send true/false/null for booleans and nulls nested in array query parameters.
• Negative test data differing between runs, and sometimes failing to generate, for the same seed.
• Bodies exceeding maxProperties when a captured resource value is injected.

Schema handling

• Resolve a reference naming the schema's own $id in place, without fetching it.
• Schema error on references inside a schema whose $id is a bare fragment like #/definitions/text.
• Intermittent "Path parameter is not defined" on specs split across many external files. #4414
• Report schemas rejected by their JSON Schema draft as a schema error.
• Report a pattern the validator cannot compile as an invalid regular expression.
• Internal warning text shown for unreadable patternProperties regexes and patterns containing a quote.
• Run aborting with an internal error on non-string parameter names like true.
• Internal error on truncated runtime expressions like $response. in Open API links.
• Read unquoted on, off, yes and no in YAML documents as strings, per YAML 1.2.

Coverage phase

• Stalling and using gigabytes on a pattern with optional parts and maxLength.
• Endless recursion and runtime errors on reference cycles through allOf, oneOf, or anyOf.
• Rewriting booleans in a schema's own example into strings for every later case.

... (truncated)

Commits

• b8dce4c chore: Release 4.25.0
• a26ff4b fix: Bodies exceeding maxProperties when a captured resource value is injected
• 2248fc8 fix: ValueError on binary data
• a8cfea7 fix: Negative test data differing between runs, and sometimes failing to gene...
• 15b6672 chore: update jsonschema_rs to 0.50.0
• 6518c35 perf: Up to 7x lower memory use building state machines for schemas with thou...
• b20881b feat: allow_header_conformance check comparing the Allow header against t...
• 58ba795 test: Clear caches in corpus tests
• 1d8c85e refactor: Remove unused code
• 1578846 feat: Report filter expressions that match no API operations, with the closes...
• Additional commits viewable in compare view

[google-oss-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from al-pragliola. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[dependabot]

Superseded by #3148.