🚀 Added
- Reuse literal values from the application's Python source during generation. Disable via
analysis.constants.enabled. - Web Fuzzing Commons authentication via
[auth.wfc]. - Automatic
429retries honoring theRetry-Afterheader with--rate-limit=auto. #1722 checks.response_schema_conformance.validate-formatsto disableformatvalidation in response checks. #2481
🐛 Fixed
- False positive
positive_data_acceptancefor arrays withcontains/minContains/maxContainsin the coverage phase. - False positive
positive_data_acceptancefor objects withdependentRequired/dependentSchemasin the coverage phase. - False positive
negative_data_rejectionfor objects combiningadditionalPropertieswith matchingpatternProperties. - False positive
positive_data_acceptancefor path integers at the schema minimum. #4312 - Integers generated outside the range implied by
format: int32/int64. #593 - Internal error on responses declaring an unknown or invalid charset.
- Generation error for numbers combining
multipleOfwithminimumandmaximumin the coverage phase. - False positive
negative_data_rejectionforconstandpropertyNamesunder Open API 3.0 in the coverage phase. - Integers just below the
int64minimum accepted during schema validation.
🚀 Performance
- Cache for GraphQL schema processing.