Bump vws-python-mock from 2026.8.26.1 to 2026.9.6

[dependabot]

Bumps vws-python-mock from 2026.8.26.1 to 2026.9.6.

Release notes

Sourced from vws-python-mock's releases.

Release 2026.09.06

2026.09.06

• Add MockVWS.set_target_recognition_counts and a matching target manager endpoint for the Flask and Docker mock, for setting the recognition counts which the target summary report and the reco counts report show for a target. A reco counts report now has a row for each target with recognitions in the requested month, and the recognition counts and recognition threshold of a cloud database are kept when the database is created in the Flask and Docker mock.

• Order Query API and GET /duplicates/{target_id} results by match score, with the best match first, as the real Query API does. Matches with equal scores keep the existing upload date and then target ID order.

  Image matchers now return a score, or None for no match, rather than a bool. StructuralSimilarityMatcher returns the images' SSIM score, and ExactMatcher gives every match the same score. A custom query_match_checker or duplicate_match_checker which returns a bool now raises a TypeError; return a score, such as 1.0, for a match and None for no match instead. The mock's ranking is its matcher's opinion, not Vuforia's proprietary one, so the mock's order still need not agree with the real Query API's order.

• Respond, rather than failing to respond, to a request body which is not UTF-8 and to a query request whose multipart/form-data body ends before its closing boundary.

• Return a 400 response which names the offending field and the accepted values, rather than a 500 response, when the target manager container is given an invalid cloud database or VuMark database to create. Return a 404 response, rather than a 500 response, when the target manager container is asked to add a target to a database which does not exist.

• Say which claims about the real Vuforia Web Services the mock has not had checked against them. :doc:unverified-behavior lists each such claim and what would verify it, and differences-to-vws marks the unverified assumptions among its deliberate differences.

• Return a BadImage response, rather than failing to respond, when an image given to the Target API is truncated before the end of its image data.

• MockVWS now intercepts httpx2 requests, synchronous and asynchronous, alongside requests and httpx. The httpx2 path uses native httpx2 requests and responses, and does not need httpx2.alias_httpx().

• Fix nested MockVWS instances on the httpx backend: an inner mock is now the only one which answers while it is running, matching the requests and httpx2 backends. Previously the outer mock kept answering and requests to the inner mock's URL were refused.

• Return a response, rather than raising an uncaught JSONDecodeError, when an empty body is given to a VWS endpoint which takes a JSON body. As real Vuforia does, POST /targets and PUT /targets/<target_id> now return a 500 Fail response, the reco counts report endpoint returns a 400 Fail response, and the VuMark instance generation endpoint returns a 400 BadRequest response.

Changelog

Sourced from vws-python-mock's changelog.

Changelog

.. towncrier release notes start

2026.09.08.1

• The URL of a reco counts report now has the shape of the presigned cloud storage URL which real Vuforia returns. The report file is named {date}-{hour}.csv for the current month and {month}.csv for the previous month, so two requests for the same month in the same hour name the same file and serve the report which the first request generated. The URL carries the query parameters of a presigned URL, and the mock honors X-Amz-Date and X-Amz-Expires as real Vuforia's storage does, so a URL which is out of date or which has no query parameters gives the 403 XML error document which Amazon S3 gives. A report which is not yet generated gives the 404 NoSuchKey XML error document which Amazon S3 gives, as real Vuforia has now been observed to do, rather than an empty body.

2026.09.08

• The response delay and client timeout simulation is now provided by the mock-response-delay package.

• The mock now returns NGINX's 400 Request Header Or Cookie Too Large response for any request header line longer than 8190 bytes, as real Vuforia does.

• Match real Vuforia's request rate limiting, which was checked against it on 2026-09-08. DOCUMENTED_REQUEST_RATE_LIMITS now allows two GET /targets requests per minute rather than one, a rate-limited request gets Envoy's empty-bodied 429 response rather than a JSON TooManyRequests body, and the limits are applied before the request's signature is checked.

2026.09.06

• Add MockVWS.set_target_recognition_counts and a matching target manager endpoint for the Flask and Docker mock, for setting the recognition counts which the target summary report and the reco counts report show for a target. A reco counts report now has a row for each target with recognitions in the requested month, and the recognition counts and recognition threshold of a cloud database are kept when the database is created in the Flask and Docker mock.

• Order Query API and GET /duplicates/{target_id} results by match score, with the best match first, as the real Query API does. Matches with equal scores keep the existing upload date and then target ID order.

  Image matchers now return a score, or None for no match, rather than a bool. StructuralSimilarityMatcher returns the images' SSIM score, and ExactMatcher gives every match the same score. A custom query_match_checker or duplicate_match_checker which returns a bool now raises a TypeError; return a score, such as 1.0, for a match and None for no match instead. The mock's ranking is its matcher's opinion, not Vuforia's proprietary one, so the mock's order still need not agree with the real Query API's order.

• Respond, rather than failing to respond, to a request body which is not UTF-8 and to a query request whose multipart/form-data body ends before its closing boundary.

• Return a 400 response which names the offending field and the accepted values, rather than a 500 response, when the target manager container is given an invalid cloud database or VuMark database to create. Return a 404 response, rather than a 500 response, when the target manager container is asked to add a target to a database which does not exist.

• Say which claims about the real Vuforia Web Services the mock has not had checked against them. :doc:unverified-behavior lists each such claim and what would verify it, and differences-to-vws marks the unverified assumptions among its deliberate differences.

• Return a BadImage response, rather than failing to respond, when an image given to the Target API is truncated before the end of its image data.

• MockVWS now intercepts httpx2 requests, synchronous and asynchronous, alongside requests and httpx. The httpx2 path uses native httpx2 requests and responses, and does not need httpx2.alias_httpx().

• Fix nested MockVWS instances on the httpx backend: an inner mock is now the only one which answers while it is running, matching the requests and httpx2 backends.

... (truncated)

Commits

• c75c10d Bump CHANGELOG
• 0eb57c1 Document which mock behavior is unverified against real Vuforia (#3552)
• 924f1bd Reject an empty body on VWS endpoints which take JSON (#3551)
• bd50470 Verify that an update does not reset the tracking rating to -1 (#3549)
• 7f49489 Consult nested mocks innermost-first on the httpx backend (#3548)
• 9afd48e Add HTTPX2 in-process mock support (#3543)
• c3665c5 Cover container-split behavior in the Docker tests (#3545)
• 8a21a53 Harden real Vuforia tests against transient failures and exhausted allowance ...
• 930fbeb chore(deps): Bump prek from 0.5.0 to 0.5.1 (#3535)
• 37120fd chore(deps): Bump shfmt-py from 4.0.0 to 4.1.0 (#3537)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)