deps(deps): bump jsonschema from 0.47.0 to 0.52.1

[dependabot]

Bumps jsonschema from 0.47.0 to 0.52.1.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.52.1

Performance

• minLength and maxLength together now scan the string once.
• unevaluatedProperties is up to 2.9x faster.
• evaluate is up to 27% faster on reference-heavy schemas.

[Ruby] Release 0.52.1

Performance

• minLength and maxLength together now scan the string once.
• unevaluatedProperties is up to 2.9x faster.
• evaluate is up to 27% faster on reference-heavy schemas.

[Rust] Release 0.52.1

Fixed

• multipleOf rejecting valid values like 1070468.14 for 0.01 without arbitrary-precision.

Performance

• minLength and maxLength together now scan the string once.
• multipleOf with a fractional divisor is 8-16x faster.
• unevaluatedProperties is up to 2.9x faster.
• evaluate is up to 27% faster on reference-heavy schemas.

[CLI] Release 0.52.0

No release notes provided.

[Python] Release 0.52.0

Added

• The offline argument, refusing to fetch references outside registry.

Fixed

• Canonicalization not idempotent where a patternProperties $ref matches a key properties names.
• Type stubs omitting ValidationError.absolute_keyword_location.
• The draft argument and the Draft201909Validator / Draft202012Validator classes gating keywords on the vocabularies of the $schema they override, so the validator accepted every instance.
• is_valid disagreeing with validate, iter_errors, and evaluate on a schema that reaches its own $ref twice, one of them under not.

[Ruby] Release 0.52.0

Added

• The offline: keyword argument, refusing to fetch references outside registry:.

Fixed

• Canonicalization not idempotent where a patternProperties $ref matches a key properties names.
• The draft: keyword argument and the Draft201909Validator / Draft202012Validator classes gating keywords on the vocabularies of the $schema they override, so the validator accepted every instance.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.52.1] - 2026-08-30

Fixed

• multipleOf rejecting valid values like 1070468.14 for 0.01 without arbitrary-precision.

Performance

• minLength and maxLength together now scan the string once.
• multipleOf with a fractional divisor is 8-16x faster.
• unevaluatedProperties is up to 2.9x faster.
• evaluate is up to 27% faster on reference-heavy schemas.

[0.52.0] - 2026-08-26

Added

• Evaluation::is_valid.
• Location::is_empty.
• Display for ErrorEntry.
• ValidationOptions::offline and canonical::CanonicalizeOptions::offline, refusing to fetch references outside the registry.
• idna Cargo feature, enabled by default, gating the idn-hostname and idn-email formats. #1313
• CLI: the --offline flag of jsonschema validate, jsonschema bundle and jsonschema dereference.

Changed

• ValidationErrors' Display gained the instance path of each error.
• BREAKING: With default-features = false, the idn-hostname and idn-email formats now require the new idna feature. Without it they are unknown formats, which are accepted by default, or rejected at build time under should_ignore_unknown_formats(false). Add idna to the feature list to keep the previous behavior.

Fixed

• Canonicalization not idempotent where a patternProperties $ref matches a key properties names.
• is_valid disagreeing with validate, iter_errors, and evaluate on a schema that reaches its own $ref twice, one of them under not.
• format: email and format: idn-email rejecting an empty quoted string as the local part (it should be accepted).
• format: email and format: idn-email rejecting an address literal whose IPv6: tag is not written in that exact case (the tag is case-insensitive).
• format: email accepting a non-ASCII character in the local part (it should be rejected).
• ValidationOptions::with_draft gating keywords on the vocabularies of the $schema it overrides, so the validator accepted every instance.

Performance

• iter_errors collects into a single buffer instead of allocating and re-boxing an iterator at every schema node.

[0.51.0] - 2026-08-23

Added

• ValidationOptions::with_vocabulary and the vocabularies attribute on jsonschema::validator, declaring support for a vocabulary this crate does not implement.
• The --vocabulary flag of jsonschema validate.

Changed

... (truncated)

Commits

• fd54058 chore(ruby): Release 0.52.1
• 6f30c37 chore(python): Release 0.52.1
• 94546ce chore(rust): Release 0.52.1
• df63c8b perf: minLength and maxLength together now scan the string once
• e72993c perf: evaluate is up to 27% faster on reference-heavy schemas
• f76b17f perf: unevaluatedProperties is up to 2.9x faster
• 5f52b09 perf: add more benchmarks
• cf58094 fix: multipleOf rejecting valid values like 1070468.14 for 0.01 without...
• 1a92599 perf: Defer building the instance a validation error reports
• a1461b0 docs: Update changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 The Case of Pull Request #792

Schema Sets

• ecommerce
• reference

Schema Set ecommerce

Plain-English Readout

• Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
• Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
• Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.

🕵️ SHA-lock HOLMES full report for ecommerce (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for ecommerce (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for ecommerce (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.

---

Schema Set reference

Plain-English Readout

• Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
• Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
• Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.

🕵️ SHA-lock HOLMES full report for reference (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for reference (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for reference (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.

---

📚 Glossary (what the Holmes terms mean)

• HOLMES: Wesley’s main evidence investigation. It decides whether the cited proof is strong enough to justify shipping this commit.
• WATSON: An independent verification pass. It checks Holmes’s citations and score math instead of trusting them blindly.
• MORIARTY: A readiness forecast over time. It is advisory trend analysis, not the release gate itself.
• Schema coverage score (SCS): How much of the schema has direct supporting evidence across generated artifacts and cited proof.
• Test confidence index (TCI): How much test evidence exists for constraints, policies, relationships, and operations.
• Migration risk index (MRI): How risky the schema change is to roll out. Lower is better.
• Evidence trust: Whether the report is backed by exact citations, whole-file citations, or coarse references. Weak trust means the claim may be directionally right but not specific enough to trust blindly.
• Citation quality: A count of exact line-span citations versus whole-file or coarse references.
• ELEMENTARY: Ready to ship based on the current evidence.
• REQUIRES INVESTIGATION: More work or review is needed before shipping.
• YOU SHALL NOT PASS: Do not ship this change in its current state.

---

Machine-readable reports are grouped by schema set in workflow artifacts.

---

Filed at 221B Repository Street

[dependabot]

Superseded by #793.