chore(deps-dev): bump marshmallow from 3.26.2 to 4.2.3

[dependabot]

Bumps marshmallow from 3.26.2 to 4.2.3.

Changelog

Sourced from marshmallow's changelog.

4.2.3 (2026-03-25)

Bug fixes:

• Make marshmallow.fields.Number and marshmallow.fields.Mapping abstract base classes to prevent using them within Schemas (:issue:2924). Thanks :user:MartingaleCoda for reporting.
• Allow required to be set on marshmallow.fields.Contant (:issue:2900). Thanks :user:nosnickid for the report and :user:worksbyfriday for the PR.
• Fix marshmallow.validate.OneOf emitting extra pairs when labels outnumber choices (:issue:2869). Thanks: user:T90REAL for the report and :user:rstar327 for the PR.
• Fix behavior when passing a dot-delimited attribute name to partial for a key with data_key set (:pr:2903). Thanks :user:bysiber for the PR.
• Fix Enum field by-name lookup to only return actual members (:pr:2902). Thanks :user:bysiber for the PR.
• marshmallow.fields.DateTime with format="timestamp_ms" properly rejects bool values (:pr:2904). Thanks :user:bysiber for the PR.
• Fix typing of error_messages argument to marshmallow.fields.Field (:pr:1636). Thanks :user:repole for reporting and :user:dhruvildarji for the PR.

Other changes:

• Add ipaddress.* to marshmallow.Schema.TYPE_MAPPING (:issue:1695). Thanks :user:liberforce for the suggestion and :user:dhruvildarji for the PR.

4.2.2 (2026-02-04)

Bug fixes:

• Fix behavior of fields.Contant(None) (:issue:2868). Thanks :user:T90REAL for reporting and emmanuel-ferdman for the fix.

4.2.1 (2026-01-23)

Bug fixes:

• Fix validation of URLs beginning with uppercare FILE (:issue:2891). Thanks :user:thanhlecongg for reporting and fixing.

4.2.0 (2026-01-04)

Other changes:

• many argument of Nested properly overrides schema instance value (:pr:2854). Thanks :user:jafournier for the PR.

... (truncated)

Commits

• be73797 Bump version and update changelog
• c38b48e Add ipaddress types to Schema.TYPE_MAPPING (#2906)
• 3bc191a Fix Field.error_messages type to allow dict and list values (#2907)
• c530f85 Update package metadata to comply with PEP 639 (#2926)
• 72ac4a0 Reject booleans in from_timestamp_ms, consistent with from_timestamp (#2904)
• 024b5d0 Fix Enum field by-name lookup to only return actual members (#2902)
• 252090c Fix nested partial to use attr_name instead of data_key for prefix (#2903)
• 65374df Fix OneOf.options() emitting phantom entries when labels outnumber choices (#...
• 070dde0 Fix Constant field with required=True raising ValueError (#2901)
• fea5428 Make Number and Mapping abstract base classes (#2925)
• Additional commits viewable in compare view

[github-actions]

✅ Conflict Markers Resolved

All conflict markers have been successfully resolved in this pull request.

[github-actions]

⚠️ Changes detected in the following folders without a corresponding update to the CHANGELOG.md:

• prowler (root dependency files changed)

Please add an entry to the corresponding CHANGELOG.md file to maintain a clear history of changes.

[github-actions]

🔒 Container Security Scan

Image: prowler:5a53852
Last scan: 2026-04-14 14:47:43 UTC

📊 Vulnerability Summary

Severity	Count
🔴 Critical	4
Total	4

4 package(s) affected

⚠️ Action Required

Critical severity vulnerabilities detected. These should be addressed before merging:

• Review the detailed scan results
• Update affected packages to patched versions
• Consider using a different base image if updates are unavailable

---

📋 Resources:

• Download full report (see artifacts)
• View in Security tab
• Scanned with Trivy

[dependabot]

Superseded by #10739.