Skip to content

Update jsonschema requirement from 0.28 to 0.42#98

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/jsonschema-0.42
Closed

Update jsonschema requirement from 0.28 to 0.42#98
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/cargo/jsonschema-0.42

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 22, 2026

Updates the requirements on jsonschema to permit the latest version.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.42.1

Performance

  • Reduce dynamic dispatch overhead for non-recursive $ref resolution.
  • Cache ECMA regex transformations during format: "regex" validation.

Packaging

  • Exclude rust-toolchain.toml from wheels. #1012
Changelog

Sourced from jsonschema's changelog.

[0.42.1] - 2026-02-17

Performance

  • Reduce dynamic dispatch overhead for non-recursive $ref resolution.
  • Cache ECMA regex transformations during format: "regex" validation.

[0.42.0] - 2026-02-14

Added

  • JsonType::as_str method for zero-allocation type name access.
  • ValidationErrorKind::keyword is now public.
  • tls-ring feature flag to opt into using ring as the TLS crypto provider instead of the default aws-lc-rs. #997
  • CLI: Support YAML (.yaml/.yml) instance files in text output mode. #988

Changed

  • BREAKING: Default TLS crypto provider switched back to aws-lc-rs. Users who need ring can opt in via the tls-ring feature flag. This resolves potential conflicts with other libraries using aws-lc-rs. #997

Fixed

  • Panic when validating $ref targets that resolve to boolean schemas.

Performance

  • Cache formatted schema locations with OnceLock to avoid repeated formatting during evaluate().

[0.41.0] - 2026-02-04

Performance

  • Replace regex-based uri-template format validation with a hand-rolled RFC 6570 parser.
  • Specialize items keyword for simple type schemas ({"type": "string"}, {"type": "number"}, etc.) to eliminate dynamic dispatch overhead.
  • Precompute regex matches on known properties.
  • Faster unevaluatedProperties validation via O(1) property lookup and short-circuit oneOf evaluation.
  • Use HashMap for large set of properties.
  • Lower HashMap threshold from 40 to 15 properties for faster property lookups.

[0.40.2] - 2026-01-30

Changed

  • Exclude internal tracker field from ValidationError Debug output.
  • Switch HTTP client TLS crypto backend from aws-lc-rs to ring to simplify building from source on some Linux distributions. #957

Fixed

  • type: integer validation in Draft 4 now correctly accepts large integers outside the i64/u64 range when arbitrary-precision feature is enabled.

... (truncated)

Commits
  • 9ea8fe0 chore(ruby): Release 0.42.1
  • 283f8ca chore(python): Release 0.42.1
  • b1584ef chore(rust): Release 0.42.1
  • cc885c5 chore(python): Exclude rust-toolchain.toml from wheels
  • fb48493 perf: Cache ECMA regex transformations during format: "regex" validation
  • e385dc9 perf: Metaschema validation benchmarks
  • 3a0e590 build(deps): update serde-saphyr requirement from 0.0.18 to 0.0.19
  • ab25304 perf: Reduce dynamic dispatch overhead for non-recursive $ref resolution
  • 61b2ab4 docs(ruby): Update readme
  • 7b78864 build(deps): bump werkzeug from 2.2.3 to 3.1.5 in /crates/jsonschema-py
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.28.0...ruby-v0.42.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.42.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Feb 22, 2026
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Mar 1, 2026

Superseded by #102.

@dependabot dependabot bot closed this Mar 1, 2026
@dependabot dependabot bot deleted the dependabot/cargo/jsonschema-0.42 branch March 1, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants