Skip to content

chore(deps): bump jsonschema from 0.29.1 to 0.45.0#152

Closed
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/cargo/jsonschema-0.45.0
Closed

chore(deps): bump jsonschema from 0.29.1 to 0.45.0#152
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/cargo/jsonschema-0.45.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps jsonschema from 0.29.1 to 0.45.0.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.45.0

Added

  • bundle(schema, ...): produce a Compound Schema Document with all external $ref targets embedded in a draft-appropriate container (definitions for Draft 4/6/7, $defs for Draft 2019-09/2020-12; Appendix B). #791.
  • ValidationError.absolute_keyword_location to get the absolute keyword location URI of the schema node that produced the error.

[Ruby] Release 0.45.0

Added

  • JSONSchema.bundle(schema, ...): produce a Compound Schema Document with all external $ref targets embedded in a draft-appropriate container (definitions for Draft 4/6/7, $defs for Draft 2019-09/2020-12; Appendix B). #791.
  • ValidationError#absolute_keyword_location to get the absolute keyword location URI of the schema node that produced the error.

[Rust] Release 0.45.0

Added

  • bundle(schema) / async_bundle(schema) / ValidationOptions::bundle: produce a Compound Schema Document with external $ref targets embedded in a draft-appropriate container (definitions for Draft 4/6/7, $defs for Draft 2019-09/2020-12) while preserving $ref values. #791.
  • CLI: jsonschema validate and jsonschema bundle subcommands. Flat invocation (jsonschema schema.json -i …) is deprecated — use jsonschema validate instead. #791.
  • ValidationError::absolute_keyword_location() to get the absolute keyword location URI of the schema node that produced the error. #737.

Changed

  • ValidationError::into_parts() now returns ValidationErrorParts instead of a tuple.

[Python] Release 0.44.1

Fixed

  • hostname format now applies legacy RFC 1034 semantics in Draft 4/6 and keeps IDNA A-label validation in Draft 7+.

[Ruby] Release 0.44.1

Fixed

  • hostname format now applies legacy RFC 1034 semantics in Draft 4/6 and keeps IDNA A-label validation in Draft 7+.

[Rust] Release 0.44.1

Fixed

  • hostname format now applies legacy RFC 1034 semantics in Draft 4/6 and keeps IDNA A-label validation in Draft 7+.

[Python] Release 0.44.0

Added

  • canonical.json.to_string(object) for canonical JSON serialization (stable key ordering and numeric normalization), useful for deduplicating equivalent JSON Schemas.

Fixed

  • Do not produce annotations for non-string instances from contentMediaType, contentEncoding, and contentSchema keywords.
  • Crash when serializing strings with invalid UTF-8 (e.g., lone surrogates) during schema/instance conversion.
  • Crash when serializing dicts keyed by str enums whose value lookup raises an exception.
  • Crash when serializing enum instances whose value lookup raises an exception.
  • Reference leak when serializing enum instances repeatedly.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.45.0] - 2026-03-08

Added

  • bundle(schema) / async_bundle(schema) / ValidationOptions::bundle: produce a Compound Schema Document with external $ref targets embedded in a draft-appropriate container (definitions for Draft 4/6/7, $defs for Draft 2019-09/2020-12) while preserving $ref values. #791.
  • CLI: jsonschema validate and jsonschema bundle subcommands. Flat invocation (jsonschema schema.json -i …) is deprecated — use jsonschema validate instead. #791.
  • ValidationError::absolute_keyword_location() to get the absolute keyword location URI of the schema node that produced the error. #737.

Changed

  • ValidationError::into_parts() now returns ValidationErrorParts instead of a tuple.

[0.44.1] - 2026-03-03

Fixed

  • hostname format now applies legacy RFC 1034 semantics in Draft 4/6 and keeps IDNA A-label validation in Draft 7+.

[0.44.0] - 2026-03-02

Added

  • canonical::json::to_string(value) for canonical JSON serialization (stable key ordering and numeric normalization), useful for deduplicating equivalent JSON Schemas.

Fixed

  • Do not produce annotations for non-string instances from contentMediaType, contentEncoding, and contentSchema keywords.

[0.43.0] - 2026-02-28

Performance

  • Optimize pattern and patternProperties for ^(a|b|c)$ alternations via linear array scan.
  • Optimize ^\S*$ patterns by replacing regex with a direct ECMA-262 whitespace check.

Fixed

  • anyOf, format, unevaluatedProperties, and unevaluatedItems now correctly collect annotations per spec.

[0.42.2] - 2026-02-26

Fixed

  • SWAR digit parser accepted bytes :? (0x3A–0x3F) as valid digits during date, time, and date-time format validation, potentially allowing malformed values to pass.

Performance

  • Extend pattern prefix optimization to handle escaped slashes (^\/) and exact-match patterns (^\$ref$).
  • Specialize enum for cases when all variants are strings.

... (truncated)

Commits
  • 29ca0b0 chore(ruby): Release 0.45.0
  • f0d1392 chore(python): Release 0.45.0
  • 8dea24a chore(rust): Release 0.45.0
  • 8da0f79 feat: Schema bundling
  • 7e49e4f test: Add ci job for s390x
  • 83aec59 feat: Add absolute keyword location to ValidationError
  • e06c794 chore(ruby): Release 0.44.1
  • 5020204 chore(python): Release 0.44.1
  • d7bc14f chore(rust): Release 0.44.1
  • e6c1bc8 docs: Update changelog
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jsonschema](https://github.com/Stranger6667/jsonschema) from 0.29.1 to 0.45.0.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.29.1...ruby-v0.45.0)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 26, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Mar 26, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
group-mixer Ready Ready Preview, Comment Mar 26, 2026 0:36am

@guwidoe
Copy link
Copy Markdown
Owner

guwidoe commented Mar 26, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 26, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@guwidoe
Copy link
Copy Markdown
Owner

guwidoe commented Mar 26, 2026

Superseded by #163, which manually rolled up and merged these Dependabot updates.

@guwidoe guwidoe closed this Mar 26, 2026
auto-merge was automatically disabled March 26, 2026 03:44

Pull request was closed

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 26, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/cargo/jsonschema-0.45.0 branch March 26, 2026 03:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant