Skip to content

deps(deps): bump jsonschema from 0.47.0 to 0.55.0 - #798

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/main/jsonschema-0.55.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/main/jsonschema-0.55.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor

Bumps jsonschema from 0.47.0 to 0.55.0.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.55.0

Added

  • canonical.PatternValueFailsView, which ObjectView.violations records for a patternProperties entry.

Changed

  • Canonicalization of not over patternProperties, which kept the entry under not instead of recording the demand a key breaks.
  • Canonicalization of an anyOf over objects sharing a properties key under patternProperties, which settled only on a second pass.
  • Canonicalization of not over an allOf folded through a reference, which settled only on a second pass.
  • Canonicalization of a multipleOf divisor past f64 precision, which was not taken to divide itself.
  • Canonicalization of an anyOf over a value beside a window pinned to it, which settled only on a second pass.
  • Canonicalization of minProperties: 1 beside a not that already demands a key, which settled only on a second pass.

Fixed

  • absolute_keyword_location naming the sibling keyword whose validator carries the check: maxLength beside minLength, minItems, maxItems or type beside items, and a two-name required beside properties. #1579
  • schemaLocation in evaluate output naming minLength for a maxLength failure. #1579

[Ruby] Release 0.55.0

Added

  • JSONSchema::Canonical::PatternValueFailsView, which ObjectView#violations records for a patternProperties entry.

Changed

  • Canonicalization of not over patternProperties, which kept the entry under not instead of recording the demand a key breaks.
  • Canonicalization of an anyOf over objects sharing a properties key under patternProperties, which settled only on a second pass.
  • Canonicalization of not over an allOf folded through a reference, which settled only on a second pass.
  • Canonicalization of a multipleOf divisor past f64 precision, which was not taken to divide itself.
  • Canonicalization of an anyOf over a value beside a window pinned to it, which settled only on a second pass.
  • Canonicalization of minProperties: 1 beside a not that already demands a key, which settled only on a second pass.

Fixed

  • absolute_keyword_location naming the sibling keyword whose validator carries the check: maxLength beside minLength, minItems, maxItems or type beside items, and a two-name required beside properties. #1579
  • schemaLocation in evaluate output naming minLength for a maxLength failure. #1579

[Rust] Release 0.55.0

Changed

  • BREAKING: canonical::ObjectViolationView gained the PatternValueFails variant, which negation records for a patternProperties entry.
  • Canonicalization of not over patternProperties, which kept the entry under not instead of recording the demand a key breaks.
  • Canonicalization of unevaluated* beside a conditional reaching no key or index the node already evaluates, which spent a case on it.
  • Canonicalization of a conditional split outgrowing its per-node case budget, which kept documents like the Open API 3.2 meta-schema Raw.
  • Canonicalization of an anyOf over objects sharing a properties key under patternProperties, which settled only on a second pass.
  • Canonicalization of not over an allOf folded through a reference, which settled only on a second pass.
  • Canonicalization of a multipleOf divisor past f64 precision, which was not taken to divide itself.
  • Canonicalization of an anyOf over a value beside a window pinned to it, which settled only on a second pass.
  • Canonicalization of minProperties: 1 beside a not that already demands a key, which settled only on a second pass.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.55.0] - 2026-09-06

Changed

  • BREAKING: canonical::ObjectViolationView gained the PatternValueFails variant, which negation records for a patternProperties entry.
  • Canonicalization of not over patternProperties, which kept the entry under not instead of recording the demand a key breaks.
  • Canonicalization of unevaluated* beside a conditional reaching no key or index the node already evaluates, which spent a case on it.
  • Canonicalization of a conditional split outgrowing its per-node case budget, which kept documents like the Open API 3.2 meta-schema Raw.
  • Canonicalization of an anyOf over objects sharing a properties key under patternProperties, which settled only on a second pass.
  • Canonicalization of not over an allOf folded through a reference, which settled only on a second pass.
  • Canonicalization of a multipleOf divisor past f64 precision, which was not taken to divide itself.
  • Canonicalization of an anyOf over a value beside a window pinned to it, which settled only on a second pass.
  • Canonicalization of minProperties: 1 beside a not that already demands a key, which settled only on a second pass.

Fixed

  • absolute_keyword_location naming the sibling keyword whose validator carries the check: maxLength beside minLength, minItems, maxItems or type beside items, and a two-name required beside properties. #1579
  • schemaLocation in evaluate output naming minLength for a maxLength failure. #1579

[0.54.0] - 2026-09-06

Added

  • backend = SerdeJson on #[jsonschema::validator], generating a validator that reads serde_json::Value.
  • PreparedDocument::unsatisfiable_pointers, listing every subschema no value satisfies.

Changed

  • Canonicalization of unevaluated* beside dependentSchemas or if/then/else, which kept the document Raw.
  • Canonicalization of not over patternProperties, which kept the document Raw.

Performance

  • validate and iter_errors check each assertion keyword with the is_valid path and build an error only for a failing one.
  • evaluate holds its output tree in one allocation instead of one per node.
  • A pattern of ^\S*$ scans bytes instead of decoding every character.
  • validate on properties beside a two-name required confirms both names in the pass that checks the properties, instead of looking each up first.
  • A string enum compares an option's length and first and last eight bytes before its full text.
  • A JSON Pointer segment is scanned for ~ and / eight bytes at a time before it is copied.
  • Canonicalization cloning leaves per intersection and the definition map per settled target.

Fixed

  • type: array with items and minItems/maxItems checking the built-in length bound even when a custom keyword overrides minItems or maxItems, so the bound was evaluated twice.
  • A custom keyword overriding type, required or maxLength not replacing the built-in check for that keyword.
  • A custom keyword overriding items, minLength, properties or additionalProperties leaving its sibling keywords unchecked.
  • #[jsonschema::validator] generated code that named serde_json directly, so it needed the consumer crate to depend on serde_json too.
  • Canonicalization of not over an object with properties, patternProperties and additionalProperties, which applied additionalProperties to the keys listed in properties.

[0.53.0] - 2026-09-02

... (truncated)

Commits
  • 7ef3595 chore(ruby): Release 0.55.0
  • b5058eb chore(rust): Release 0.55.0
  • 237cad2 chore: Canonicalization of minProperties: 1 beside a not that already dem...
  • 93bea01 chore: Canonicalization of an anyOf over a value beside a window pinned to ...
  • e116ab9 chore: Canonicalization of not over an allOf folded through a reference, ...
  • e4ad933 chore: Canonicalization of a multipleOf divisor past f64 precision, which...
  • a1d67d4 fix: Canonicalization of an anyOf over objects sharing a properties key u...
  • fb843de feat: Improve canonicalization
  • 7652665 fix: Incorrect schemaLocation & absolute_keyword_location in some cases
  • 0e991b3 fix: Playground UI on mobile
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [jsonschema](https://github.com/Stranger6667/jsonschema) from 0.47.0 to 0.55.0.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.47.0...ruby-v0.55.0)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.55.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from flyingrobots as a code owner September 10, 2026 12:47
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 10, 2026
@github-actions

Copy link
Copy Markdown

🔍 The Case of Pull Request #798

Schema Sets

  • ecommerce
  • reference

Schema Set ecommerce

Plain-English Readout

  • Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
  • Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
  • Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

  1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
  2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
  3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.
🕵️ SHA-lock HOLMES full report for ecommerce (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for ecommerce (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for ecommerce (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.


Schema Set reference

Plain-English Readout

  • Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
  • Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
  • Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

  1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
  2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
  3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.
🕵️ SHA-lock HOLMES full report for reference (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for reference (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for reference (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.


📚 Glossary (what the Holmes terms mean)
  • HOLMES: Wesley’s main evidence investigation. It decides whether the cited proof is strong enough to justify shipping this commit.
  • WATSON: An independent verification pass. It checks Holmes’s citations and score math instead of trusting them blindly.
  • MORIARTY: A readiness forecast over time. It is advisory trend analysis, not the release gate itself.
  • Schema coverage score (SCS): How much of the schema has direct supporting evidence across generated artifacts and cited proof.
  • Test confidence index (TCI): How much test evidence exists for constraints, policies, relationships, and operations.
  • Migration risk index (MRI): How risky the schema change is to roll out. Lower is better.
  • Evidence trust: Whether the report is backed by exact citations, whole-file citations, or coarse references. Weak trust means the claim may be directionally right but not specific enough to trust blindly.
  • Citation quality: A count of exact line-span citations versus whole-file or coarse references.
  • ELEMENTARY: Ready to ship based on the current evidence.
  • REQUIRES INVESTIGATION: More work or review is needed before shipping.
  • YOU SHALL NOT PASS: Do not ship this change in its current state.

Machine-readable reports are grouped by schema set in workflow artifacts.


Filed at 221B Repository Street

@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #800.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/main/jsonschema-0.55.0 branch September 14, 2026 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants