🚀 Added
Case.auth_identity: name of the WFC auth entry a case was sent with.- Built-in PNG, JPEG, GIF and WebP request bodies for
image/*media types.
🔧 Changed
- Docker images use Python 3.14.9.
🐛 Fixed
- Stateful authentication failures hidden or reported as a Hypothesis traceback.
- pytest HTML report counting tested operations as errored when some of their tests errored.
- Missing filename on
multipart/form-databinary parts declared via$ref. - Missing multipart filenames and part encodings for a
$refbody schema with nested references. - Coverage phase filling required binary multipart parts declared via
$refwithstrvalues. - Type hints rejecting
tagandoperation_idfilters in authapply_to/skip_for. - Stateful phase blaming filters when linked operations have unparsable required request bodies.
- Internal
x-bundledlocation in errors for invalid response schemas behind$ref. - Health check failure in negative mode for operations with only an unconstrained binary body.
- False negative
negative_data_rejectionfor invalid path parameters on Open API 2.0. - Captured values and schema
exampleunused for$refrequest bodies with nested references. st fuzzshowing "No issues found" whenwarnings.fail-onfails the run.st runrequests hanging indefinitely when--request-timeoutis not set.- Python spelling like
TrueorNonesent in binary bodies and multipart file parts. - Missing dynamic auth config suggestion for login bodies behind
$refwith nested references. - Multipart parts serialized with another multipart media type's schema and
encoding. - Serialization error for negative cases of
multipart/form-datafile arrays withencoding.contentType. - Internal error in
st fuzzfor unknown checks in the configuration file. - Coverage phase sending or dropping list-style request body
examplesof Example Objects.