chore(deps): update dependency marshmallow to v3.26.2

This MR contains the following updates:

Package	Update	Change
marshmallow (changelog)	minor	==3.21.1 -> ==3.26.2

---

Release Notes

marshmallow-code/marshmallow (marshmallow)

v3.26.2

Compare Source

Bug fixes:

• :cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

v3.26.1

Compare Source

Bug fixes:

• Typing: Fix type annotations for class Meta <marshmallow.Schema.Meta> options (:issue:2804). Thanks :user:lawrence-law for reporting.

Other changes:

• Remove default value for the data param of Nested._deserialize <marshmallow.fields.Nested._deserialize> (:issue:2802). Thanks :user:gbenson for reporting.

v3.26.0

Compare Source

Features:

• Typing: Add type annotations and improved documentation for class Meta <marshmallow.Schema.Meta> options (🇵🇷2760).
• Typing: Improve type coverage of marshmallow.Schema.SchemaMeta (🇵🇷2761).
• Typing: marshmallow.Schema.loads parameter allows bytes and bytesarray (🇵🇷2769).

Bug fixes:

• Respect data_key when schema validators raise a ValidationError <marshmallow.exceptions.ValidationError> with a field_name argument (:issue:2170). Thanks :user:matejsp for reporting.
• Correctly handle multiple @post_load <marshmallow.post_load> methods where one method appends to the data and another passes pass_original=True (:issue:1755). Thanks :user:ghostwheel42 for reporting.
• URL fields now properly validate file paths (:issue:2249). Thanks :user:0xDEC0DE for reporting and fixing.

Documentation:

• Add :doc:upgrading guides <upgrading> for 3.24 and 3.26 (🇵🇷2780).
• Various documentation improvements (🇵🇷2757, 🇵🇷2759, 🇵🇷2765, 🇵🇷2774, 🇵🇷2778, 🇵🇷2783, 🇵🇷2796).

Deprecations:

• The ordered class Meta <marshmallow.Schema.Meta> option is deprecated (:issue:2146, 🇵🇷2762). Field order is already preserved by default. Set marshmallow.Schema.dict_class to collections.OrderedDict to maintain the previous behavior.

v3.25.1

Compare Source

Bug fixes:

• Typing: Fix type annotations for Tuple <marshmallow.fields.Tuple>, Boolean <marshmallow.fields.Boolean>, and Pluck <marshmallow.fields.Pluck> constructors (🇵🇷2756).
• Typing: Fix overload for marshmallow.class_registry.get_class (🇵🇷2756).

Documentation:

• Various documentation improvements (🇵🇷2746, 🇵🇷2747, 🇵🇷2748, 🇵🇷2749, 🇵🇷2750, 🇵🇷2751).

v3.25.0

Compare Source

Features:

• Typing: Improve type annotations for SchemaMeta.get_declared_fields (🇵🇷2742).

Bug fixes:

• Typing: Relax type annotation for Schema.opts to allow subclasses to define their own options classes (🇵🇷2744).

Other changes:

• Restore marshmallow.base.SchemaABC for backwards-compatibility (:issue:2743). Note that this class is deprecated and will be removed in marshmallow 4. Use marshmallow.schema.Schema as a base class for type-checking instead.

v3.24.2

Compare Source

Changes:

• Don't override __new__ to avoid breaking usages of inspect.signature with Field <marshmallow.fields.Field> classes. This allows marshmallow-sqlalchemy users to upgrade marshmallow without upgrading to marshmallow-sqlalchemy>=1.1.1.

Documentation:

• Add top-level API back to docs (:issue:2739). Thanks :user:llucax for reporting.

v3.24.1

Compare Source

Bug fixes:

• Typing: Fix typing for class_registry.get_class <marshmallow.class_registry.get_class> (🇵🇷2735).

v3.24.0

Compare Source

Features:

• Typing: Improve typings in marshmallow.fields (🇵🇷2723).
• Typing: Replace type comments with inline typings (🇵🇷2718).

Bug fixes:

• Typing: Fix type hint for nested parameter of Nested <marshmallow.fields.Nested> (🇵🇷2721).

Deprecations:

• Custom validators should raise a ValidationError <marshmallow.exceptions.ValidationError> for invalid values. Returning `False`` is no longer supported .
• Deprecate context parameter of Schema <marshmallow.schema.Schema> (:issue:1826). Use contextVars.ContextVar to pass context data instead.
• Field <marshmallow.fields.Field>, Mapping <marshmallow.fields.Mapping>, and Number <marshmallow.fields.Number> should no longer be used as fields within schemas. Use their subclasses instead.

v3.23.3

Compare Source

Bug fixes:

• Typing: Fix typing for Schema.from_dict <marshmallow.schema.Schema.from_dict> (:issue:1653). Thanks :user:SteadBytes for reporting.

Support:

• Documentation: Various documentation cleanups, including more concise docs in the marshmallow.fields API reference (:issue:2307). Thanks :user:AbdealiLoKo for reporting.

v3.23.2

Compare Source

Bug fixes:

• Improve type hint formatting for Field, Nested, and Function fields to resolve PyCharm warnings (:issue:2268). Thanks :user:Fares-Abubaker for reporting and fixing.

v3.23.1

Compare Source

Support:

• Document absolute parameter of URL field (🇵🇷2327).
• Documentation: Remove (outdated) minimum Python 3 minor version in documentation and README (🇵🇷2323).

v3.23.0

Compare Source

Features:

• Typing: replace "type" with specific metaclass for Schema and Field.

Other changes:

• Officially support Python 3.13 (🇵🇷2319).
• Drop support for Python 3.8 (🇵🇷2318).

v3.22.0

Compare Source

Features:

• Add many Meta option to Schema so it expects a collection by default (:issue:2270). Thanks :user:himalczyk for reporting and :user:deckar01 for the MR.
• Refactor hooks (🇵🇷2279). Thanks :user:deckar01 for the MR.

v3.21.3

Compare Source

Bug fixes:

• Fix memory leak that prevented schema instances from getting GC'd (🇵🇷2277). Thanks :user:mrcljx for the MR.

v3.21.2

Compare Source

Bug fixes:

• Allow timestamp 0 in fields.DateTime (:issue:2133). Thanks :user:flydzen for reporting.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.