Skip to content

chore(deps): update jsonschema requirement from 0.46 to 0.48#45

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonschema-0.48
Open

chore(deps): update jsonschema requirement from 0.46 to 0.48#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonschema-0.48

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown

Updates the requirements on jsonschema to permit the latest version.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.48.1

Fixed

  • Missing required errors in evaluate() output for schemas with properties and a two-entry required array. #1220
  • contentEncoding errors for invalid UTF-8 after decoding incorrectly had empty instance_path and schema_path.
Changelog

Sourced from jsonschema's changelog.

[0.48.1] - 2026-07-17

Fixed

  • Missing required errors in evaluate() output for schemas with properties and a two-entry required array. #1220
  • contentEncoding errors for invalid UTF-8 after decoding incorrectly had empty instance_path and schema_path.

Performance

  • Faster code generation for #[jsonschema::validator] (~5% across benchmarked schemas), via aliasing repeated paths in the emitted code.

[0.48.0] - 2026-07-16

Added

  • iter_errors for #[jsonschema::validator]-generated validators.

Fixed

  • Per-branch context on generated anyOf and oneOf validation errors, matching runtime validators.
  • $recursiveRef in generated validators incorrectly resolved to the innermost $recursiveAnchor (it should resolve to the outermost one).
  • Integer instances just outside the i64/u64 range incorrectly compared against numeric bounds through lossy f64 rounding under arbitrary-precision (e.g. {"minimum": -9223372036854775808} accepted -9223372036854775809).

Changed

  • One canonical number spelling from canonical::json::to_string under arbitrary-precision ("1e-2" becomes "0.01", "1.50" becomes "1.5") and correctly-rounded float parsing (serde_json's float_roundtrip).

Performance

  • Faster multipleOf validation for integer instances with integer divisors, via integer arithmetic instead of floating-point modulo.

[0.47.0] - 2026-07-08

Added

  • #[jsonschema::validator] attribute macro (behind the macros feature) that compiles a JSON Schema into is_valid and validate implementations at build time.
  • Keyword::iter_errors for reporting multiple validation errors from a single custom keyword. #1071

Changed

  • Bump MSRV to 1.85.0.

Performance

  • Faster meta-schema validation and schema compilation with the macros feature, via compile-time meta-schema validators.

Fixed

  • type under items asserted with the Validation vocabulary disabled.
  • Disabled vocabularies ignored for $ref targets without their own $schema (e.g. $defs entries).

... (truncated)

Commits
  • 1c707f3 chore(ruby): Release 0.48.1
  • effbc77 chore: Bump jsonschema-wasm version to 0.48.1
  • 27d6c44 chore: Update the version bump script
  • b2e157d chore(python): Release 0.48.1
  • 4313166 chore(rust): Release 0.48.1
  • 7ac65d7 chore: Tune playground styles
  • 66cbd1b chore: Tune playground styles
  • 3869179 chore: Add links to playground
  • 4dc5b12 feat: WebAssembly playground
  • cec64ef fix: contentEncoding errors for invalid UTF-8 after decoding incorrectly ha...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@cli-v0.46.0...ruby-v0.48.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.48.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

While the dependency update is technically 'up to standards' according to automated analysis, it introduces significant environment and behavioral changes. Most notably, the update increases the Minimum Supported Rust Version (MSRV), which may cause build failures if the CI/CD pipeline is not updated. Additionally, changes to canonical number representation in the underlying library could lead to regressions in components that rely on exact string matching for validated JSON. These risks should be mitigated before merging.

About this PR

  • The dependency update involves a bump in the Minimum Supported Rust Version (MSRV). It is necessary to ensure that the project's CI and local build environments are compatible with the new requirements to avoid immediate compilation failures.
  • The underlying library has modified how numbers are represented in canonical JSON output (e.g., changes in scientific notation vs. decimal spelling). This may break tests or application logic that depends on specific string representations of validated JSON data.

Test suggestions

  • Verify project compilation and execution using the updated Minimum Supported Rust Version requirement
  • Verify that JSON schema validation logic remains consistent regarding canonical number spelling changes
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify project compilation and execution using the updated Minimum Supported Rust Version requirement
2. Verify that JSON schema validation logic remains consistent regarding canonical number spelling changes

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants