Bump marshmallow from 3.26.2 to 4.2.2

[dependabot]

• Identify breaking changes in marshmallow 4.x that cause ImportError in tests
• Fix fields.Str() → fields.String() (explicit, consistent)
• Fix default= → dump_default= for UnauthorizedError.message (removed in marshmallow 4.0)
• Fix keyword metadata args → metadata={...} for enum= and example= kwargs (removed in marshmallow 4.0)
• Fix fields.List(fields.Str) (class ref) → fields.List(fields.String()) (instance), which now errors at class declaration time in 4.0
• Verified all schema definitions work correctly with marshmallow 4.2.2
• CodeQL scan: 0 alerts

[suhaibmujahid]

@copilot updating the dependency caused the following test error:

+ pytest --cov=http_service http_service/tests/ -vvv
2026-02-16 23:18:46,514:INFO:matplotlib.font_manager:generated new fontManager
ImportError while loading conftest '/bugbug/http_service/tests/conftest.py'.
http_service/tests/conftest.py:30: in <module>
    from bugbug_http import app
http_service/bugbug_http/app.py:110: in <module>
    class NotAvailableYet(Schema):
http_service/bugbug_http/app.py:111: in NotAvailableYet
    ready = fields.Boolean(enum=[False])
            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^
/usr/local/lib/python3.12/site-packages/marshmallow/fields.py:1173: in __init__
    super().__init__(**kwargs)
E   TypeError: Field.__init__() got an unexpected keyword argument 'enum'

Please fix the root cause.

[Copilot]

@copilot updating the dependency caused the following test error:

...

Fixed in commit c52be13. The test failure was caused by several marshmallow 4.x breaking changes in app.py:

1. default= removed → replaced with dump_default= (deprecated in 3.13, removed in 4.0)
2. Metadata as kwargs removed → moved enum= and example= into metadata={...} dict (deprecated in 3.10, removed in 4.0)
3. fields.List(fields.Str) (class reference) → fields.List(fields.String()) (instance) — marshmallow 4.0 now errors at class declaration time when a class is passed instead of an instance
4. fields.Str() → fields.String() for clarity and consistency

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• marshmallow.readthedocs.io
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)