chore(deps): bump schemathesis from 4.5.4 to 4.6.1

[dependabot]

Bumps schemathesis from 4.5.4 to 4.6.1.

Release notes

Sourced from schemathesis's releases.

Release 4.6.1

🐛 Fixed

• False positive in negative_data_rejection check for text/plain and application/octet-stream endpoints where non-string values become valid after serialization.
• Authentication headers are no longer reapplied during negative testing when intentionally removed. #3355

Release 4.6.0

🎉 This release extends dependency analysis to non-stateful phases, so they can reuse successful API responses too.

🚀 Added

• CLI: Dependency-based operation ordering in non-stateful tests.
• CLI: Capture and reuse of successful API responses in the fuzzing phase.

🏎️ Performance

• Response deserialization caching for YAML and custom formats.

🐛 Fixed

• pytest: Reproduction code is no longer shown for configuration errors like missing base_url.
• pytest: Seed from schema config is now properly applied to tests.
• pytest: Proxy from schema config is now properly applied to tests.
• pytest: Fuzzing phase-specific generation config (e.g., max_examples) is now properly applied to tests.
• schemathesis.openapi.from_url() now uses wait_for_schema from config when not explicitly provided.
• Stateful testing now supports custom deserializers for non-JSON response formats.
• Crash in coverage phase when encountering items: false with prefixItems in OpenAPI 3.1.0 schemas.
• Custom media type strategies now apply when encoding.contentType is an array. #3339
• False positives for format: binary and format: byte in negative testing.
• False positives for application/x-www-form-urlencoded bodies in negative testing. #3338
• Internal error during negative testing of application/x-www-form-urlencoded with WSGI apps.
• Infinite recursion during the examples phase if allOf contained $ref that required bundling.

Changelog

Sourced from schemathesis's changelog.

4.6.1 - 2025-11-23

🐛 Fixed

• False positive in negative_data_rejection check for text/plain and application/octet-stream endpoints where non-string values become valid after serialization.
• Authentication headers are no longer re-applied during negative testing when intentionally removed. #3355

4.6.0 - 2025-11-22

🚀 Added

• CLI: Dependency-based operation ordering in non-stateful tests.
• CLI: Capture and reuse of successful API responses in the fuzzing phase.

🏎️ Performance

• Response deserialization caching for YAML and custom formats.

🐛 Fixed

• pytest: Reproduction code is no longer shown for configuration errors like missing base_url.
• pytest: Seed from schema config is now properly applied to tests.
• pytest: Proxy from schema config is now properly applied to tests.
• pytest: Fuzzing phase-specific generation config (e.g., max_examples) is now properly applied to tests.
• schemathesis.openapi.from_url() now uses wait_for_schema from config when not explicitly provided.
• Stateful testing now supports custom deserializers for non-JSON response formats.
• Crash in coverage phase when encountering items: false with prefixItems in OpenAPI 3.1.0 schemas.
• Custom media type strategies now apply when encoding.contentType is an array. #3339
• False positives for format: binary and format: byte in negative testing.
• False positives for application/x-www-form-urlencoded bodies in negative testing. #3338
• Internal error during negative testing of application/x-www-form-urlencoded with WSGI apps.
• Infinite recursion during the examples phase if allOf contained $ref that required bundling.

Commits

• 6eac0e6 chore: Release 4.6.1
• ec1071c fix: Authentication headers are no longer re-applied during negative testing ...
• 188b614 fix: False positive in negative_data_rejection check for text/plain and `...
• 57cf807 docs: Update README
• 03acb89 chore: Update pre-commit
• ee00833 chore: Release 4.6.0
• 3c08f4e fix: Infinite recursion during the examples phase if allOf contained $ref...
• 541d327 docs: Clarify CLI-only config options
• 3b962b4 fix: schemathesis.openapi.from_url() now uses wait_for_schema from config...
• e6f51b7 fix(pytest): Fuzzing phase-specific generation config is now properly applied...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)