chore(deps): bump schemathesis from 4.24.3 to 4.25.0 in the python-minor-patch group

[dependabot]

Bumps the python-minor-patch group with 1 update: schemathesis.

Updates schemathesis from 4.24.3 to 4.25.0

Release notes

Sourced from schemathesis's releases.

Release 4.25.0

🚀 Added

• Report filter expressions that match no API operations, with the closest match as a suggestion.
• allow_header_conformance check comparing the Allow header against the methods declared in the schema.

🐛 Fixed

Data generation

• Slow generation for a grouped or anchored pattern under a length bound.
• Generation hanging on a pattern whose repeated group cannot fit an exact length bound.
• Strings longer than a single-character pattern like ^[a-z]$ allows when maxLength is set.
• Values violating a pattern with possessive quantifiers like 0++0 when a length bound is set.
• Internal error generating values for a pattern naming characters outside generation.codec.
• Generate values for patterns using Unicode property escapes like \p{L}.
• Generate values for patterns using named capture groups like (?<name>...).
• Generate values for the other anyOf branches when one names an ungeneratable pattern.
• Keep a pattern the API enforces when Python cannot read it.
• Honor format when generating string values for Open API 3.1.
• Generate hostname and idn-hostname values that validators accept.
• Generate string values satisfying every pattern and format in a conjunction.
• Generate strings honoring contentEncoding and contentMediaType under Draft 7.
• Generate sendable header and cookie values for schemas with keywords beyond type.
• Generate valid data for oneOf / anyOf branches whose discriminator property is nullable.
• Unsatisfiable negative tests for operations whose path parameters have no constraint to violate.
• Name the API operation that cannot be generated when its schema is unsatisfiable.
• Hypothesis warning about an overly large representation when generating unrestricted JSON values.
• Send true/false/null for booleans and nulls nested in array query parameters.
• Negative test data differing between runs, and sometimes failing to generate, for the same seed.
• Bodies exceeding maxProperties when a captured resource value is injected.

Schema handling

• Resolve a reference naming the schema's own $id in place, without fetching it.
• Schema error on references inside a schema whose $id is a bare fragment like #/definitions/text.
• Intermittent "Path parameter is not defined" on specs split across many external files. #4414
• Report schemas rejected by their JSON Schema draft as a schema error.
• Report a pattern the validator cannot compile as an invalid regular expression.
• Internal warning text shown for unreadable patternProperties regexes and patterns containing a quote.
• Run aborting with an internal error on non-string parameter names like true.
• Internal error on truncated runtime expressions like $response. in Open API links.
• Read unquoted on, off, yes and no in YAML documents as strings, per YAML 1.2.

Coverage phase

• Stalling and using gigabytes on a pattern with optional parts and maxLength.
• Endless recursion and runtime errors on reference cycles through allOf, oneOf, or anyOf.
• Rewriting booleans in a schema's own example into strings for every later case.

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.25.0 - 2026-08-21

🚀 Added

• Report filter expressions that match no API operations, with the closest match as a suggestion.
• allow_header_conformance check comparing the Allow header against the methods declared in the schema.

🐛 Fixed

Data generation

• Slow generation for a grouped or anchored pattern under a length bound.
• Generation hanging on a pattern whose repeated group cannot fit an exact length bound.
• Strings longer than a single-character pattern like ^[a-z]$ allows when maxLength is set.
• Values violating a pattern with possessive quantifiers like 0++0 when a length bound is set.
• Internal error generating values for a pattern naming characters outside generation.codec.
• Generate values for patterns using Unicode property escapes like \p{L}.
• Generate values for patterns using named capture groups like (?<name>...).
• Generate values for the other anyOf branches when one names an ungeneratable pattern.
• Keep a pattern the API enforces when Python cannot read it.
• Honor format when generating string values for Open API 3.1.
• Generate hostname and idn-hostname values that validators accept.
• Generate string values satisfying every pattern and format in a conjunction.
• Generate strings honoring contentEncoding and contentMediaType under Draft 7.
• Generate sendable header and cookie values for schemas with keywords beyond type.
• Generate valid data for oneOf / anyOf branches whose discriminator property is nullable.
• Unsatisfiable negative tests for operations whose path parameters have no constraint to violate.
• Name the API operation that cannot be generated when its schema is unsatisfiable.
• Hypothesis warning about an overly large representation when generating unrestricted JSON values.
• Send true/false/null for booleans and nulls nested in array query parameters.
• Negative test data differing between runs, and sometimes failing to generate, for the same seed.
• Bodies exceeding maxProperties when a captured resource value is injected.

Schema handling

• Resolve a reference naming the schema's own $id in place, without fetching it.
• Schema error on references inside a schema whose $id is a bare fragment like #/definitions/text.
• Intermittent "Path parameter is not defined" on specs split across many external files. #4414
• Report schemas rejected by their JSON Schema draft as a schema error.
• Report a pattern the validator cannot compile as an invalid regular expression.
• Internal warning text shown for unreadable patternProperties regexes and patterns containing a quote.
• Run aborting with an internal error on non-string parameter names like true.
• Internal error on truncated runtime expressions like $response. in Open API links.
• Read unquoted on, off, yes and no in YAML documents as strings, per YAML 1.2.

Coverage phase

• Stalling and using gigabytes on a pattern with optional parts and maxLength.
• Endless recursion and runtime errors on reference cycles through allOf, oneOf, or anyOf.
• Rewriting booleans in a schema's own example into strings for every later case.

... (truncated)

Commits

• b8dce4c chore: Release 4.25.0
• a26ff4b fix: Bodies exceeding maxProperties when a captured resource value is injected
• 2248fc8 fix: ValueError on binary data
• a8cfea7 fix: Negative test data differing between runs, and sometimes failing to gene...
• 15b6672 chore: update jsonschema_rs to 0.50.0
• 6518c35 perf: Up to 7x lower memory use building state machines for schemas with thou...
• b20881b feat: allow_header_conformance check comparing the Allow header against t...
• 58ba795 test: Clear caches in corpus tests
• 1d8c85e refactor: Remove unused code
• 1578846 feat: Report filter expressions that match no API operations, with the closes...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

DORA Metrics

• Window: last 30 days
• Branch: main
• Deployment frequency: 12 total / 2.8 per week
• Lead time for changes: avg 0.13h / median 0.0h
• Change failure rate: 66.67% (8/12)
• MTTR: 0.82h across 8 incident(s)