Update dependency marshmallow to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
marshmallow (changelog)	>=3.20,<4 → >=4.3,<5

---

Release Notes

marshmallow-code/marshmallow (marshmallow)

v4.3.1

Compare Source

Features:

• If by_value is enabled on an enum with a None value allow_none now defaults to True.
  Thanks :user:GeraldineGalindo for the suggestion (:issue:2985).

Bug fixes:

• marshmallow.validate.URL accepts a fragment that follows an empty path,
  e.g. https://example.com#frag (:pr:3016). Thanks :user:hdimer for the PR.

v4.3.0

Compare Source

Features:

• Add pre_load and post_load parameters to marshmallow.fields.Field for
  field-level pre- and post-processing (:issue:2787).
• Typing: improvements to marshmallow.validate (:pr:2940).

v4.2.4

Compare Source

Bug fixes:

• marshmallow.validate.URL and marshmallow.validate.Email accept Internationalized Domain Names (IDNs) (:issue:2821, :issue:2936).
  marshmallow.validate.Email also correctly rejects IDN domains with leading/trailing hyphens.
  Thanks :user:touhidurrr for the report.
• Typing: Fix typing of nested in marshmallow.fields.Nested (:pr:2935).

v4.2.3

Compare Source

Bug fixes:

• Make marshmallow.fields.Number and marshmallow.fields.Mapping abstract base classes to
  prevent using them within Schemas (:issue:2924). Thanks :user:MartingaleCoda for reporting.
• Allow required to be set on marshmallow.fields.Contant (:issue:2900).
  Thanks :user:nosnickid for the report and :user:worksbyfriday for the PR.
• Fix marshmallow.validate.OneOf emitting extra pairs when labels outnumber choices (:issue:2869).
  Thanks: user:T90REAL for the report and :user:rstar327 for the PR.
• Fix behavior when passing a dot-delimited attribute name to partial for a key with data_key set (:pr:2903).
  Thanks :user:bysiber for the PR.
• Fix Enum field by-name lookup to only return actual members (:pr:2902).
  Thanks :user:bysiber for the PR.
• marshmallow.fields.DateTime with format="timestamp_ms" properly
  rejects bool values (:pr:2904). Thanks :user:bysiber for the PR.
• Fix typing of error_messages argument to marshmallow.fields.Field (:pr:1636).
  Thanks :user:repole for reporting and :user:dhruvildarji for the PR.

Other changes:

• Add ipaddress.* to marshmallow.Schema.TYPE_MAPPING (:issue:1695).
  Thanks :user:liberforce for the suggestion and :user:dhruvildarji for the PR.

v4.2.2

Compare Source

Bug fixes:

• Fix behavior of fields.Contant(None) (:issue:2868).
  Thanks :user:T90REAL for reporting and emmanuel-ferdman for the fix.

v4.2.1

Compare Source

Bug fixes:

• Fix validation of URLs beginning with uppercare FILE (:issue:2891).
  Thanks :user:thanhlecongg for reporting and fixing.

v4.2.0

Compare Source

Other changes:

• many argument of Nested properly overrides schema instance
  value (:pr:2854). Thanks :user:jafournier for the PR.

v4.1.2

Compare Source

Bug fixes:

• :cve:2025-68480: Merge error store messages without rebuilding collections.
  Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

v4.1.1

Compare Source

Bug fixes:

• Ensure URL validator is case-insensitive when using custom schemes (:pr:2874).
  Thanks :user:T90REAL for the PR.

v4.1.0

Compare Source

Other changes:

• Add __len__ implementation to missing so that it can be used with
  validate.Length <marshmallow.validate.Length> (:pr:2861).
  Thanks :user:agentgodzilla for the PR.
• Drop support for Python 3.9 (:pr:2363).
• Test against Python 3.14 (:pr:2864).

v4.0.1

Compare Source

v4.0.0

Compare Source

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "after 9am and before 5pm every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coveralls]

Coverage Report for CI Build 35985169595

Coverage remained the same at 86.202%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	645
Covered Lines:	556
Line Coverage:	86.2%
Coverage Strength:	7.76 hits per line

---

💛 - Coveralls