chore(deps): bump schemathesis from 4.25.2 to 4.26.1 in the python-minor-patch group

[dependabot]

Bumps the python-minor-patch group with 1 update: schemathesis.

Updates schemathesis from 4.25.2 to 4.26.1

Release notes

Sourced from schemathesis's releases.

Release 4.26.1

🚀 Added

• --origin option that takes scheme, host and port, and appends the schema's own base path.

🐛 Fixed

ASGI applications

• UnicodeDecodeError on non-ASCII response headers.
• Non-ASCII header values delivered with the wrong encoding.
• Generated requests sent with a different Host than the schema fetch.

WSGI applications

• Flask-RESTX error responses such as abort(404) and 405 raised as internal errors.

WFC authentication

• Operations answering 401 never escalating to the next user.
• Expired tokens never refreshed when the auth document lists several users.

Request serialization

• Array and object cookie parameters dropped instead of sent.
• Header and cookie booleans and nulls sent as Python literals instead of true / false / null.
• XML and text/plain body booleans and nulls sent as Python literals instead of true / false / null.

Coverage phase

• Crashing on parameters and bodies whose schema is written as a boolean.
• Generated header value replaced by a security scheme spelling the same header differently.
• Generated header value replaced by a path-level parameter spelling the same header differently.
• Negative cases treating valid query, header and path values as invalid data.
• Positive cases emitted when a required parameter has no satisfiable value.
• Empty string from a path parameter's enum collapsing the URL segment.
• Required headers, query and cookie parameters dropped from negative cases.
• No positive cases generated for allOf of two disjoint contains.
• Unsatisfiable schema error when an allOf branch forbids a required property with false.
• Positive cases sending a Content-Type header value its own schema rejects.

Schema handling

• Malformed operation or responses node crashing operation counting.
• Malformed operation, requestBody, content, media type, or security nodes aborting the run.
• Malformed components, path item parameters, or non-object reference targets aborting the run.
• Operation-level parameters ignored when a path item declares the same name and location.
• Malformed servers URL templates aborting the run at startup instead of reporting a schema error.
• Swagger 2.0 body parameters written as a boolean schema crashing.

... (truncated)

Changelog

Sourced from schemathesis's changelog.

4.26.1 - 2026-09-09

🚀 Added

• --origin option that takes scheme, host and port, and appends the schema's own base path.

🐛 Fixed

ASGI applications

• UnicodeDecodeError on non-ASCII response headers.
• Non-ASCII header values delivered with the wrong encoding.
• Generated requests sent with a different Host than the schema fetch.

WSGI applications

• Flask-RESTX error responses such as abort(404) and 405 raised as internal errors.

WFC authentication

• Operations answering 401 never escalating to the next user.
• Expired tokens never refreshed when the auth document lists several users.

Request serialization

• Array and object cookie parameters dropped instead of sent.
• Header and cookie booleans and nulls sent as Python literals instead of true / false / null.
• XML and text/plain body booleans and nulls sent as Python literals instead of true / false / null.

Coverage phase

• Crashing on parameters and bodies whose schema is written as a boolean.
• Generated header value replaced by a security scheme spelling the same header differently.
• Generated header value replaced by a path-level parameter spelling the same header differently.
• Negative cases treating valid query, header and path values as invalid data.
• Positive cases emitted when a required parameter has no satisfiable value.
• Empty string from a path parameter's enum collapsing the URL segment.
• Required headers, query and cookie parameters dropped from negative cases.
• No positive cases generated for allOf of two disjoint contains.
• Unsatisfiable schema error when an allOf branch forbids a required property with false.
• Positive cases sending a Content-Type header value its own schema rejects.

Schema handling

• Malformed operation or responses node crashing operation counting.
• Malformed operation, requestBody, content, media type, or security nodes aborting the run.
• Malformed components, path item parameters, or non-object reference targets aborting the run.
• Operation-level parameters ignored when a path item declares the same name and location.
• Malformed servers URL templates aborting the run at startup instead of reporting a schema error.
• Swagger 2.0 body parameters written as a boolean schema crashing.

... (truncated)

Commits

• 66b5c3e chore: Release 4.26.1
• 09bf6f4 fix: Checks disabled in a config file staying disabled when named via --checks
• 89f5207 docs: Update migration guide
• cb38e1e fix: --report json missing from the list of written reports in the run summary
• 1705902 refactor: Value serialization
• 1ff1b7a refactor: Deduplication HTTP method constants
• 104335a fix: CLI handler error at shutdown crashing the run and masking its exit code
• 01e6b80 docs: Update docs
• 8adc1ae test: Extend randomized tests
• e190bfd test: Improve corpus tests
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

DORA Metrics

• Window: last 30 days
• Branch: main
• Deployment frequency: 23 total / 5.37 per week
• Lead time for changes: avg 4.74h / median 0.0h
• Change failure rate: 73.91% (17/23)
• MTTR: 79.52h across 11 incident(s)