Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2025

Updates the requirements on jsonschema to permit the latest version.

Changelog

Sourced from jsonschema's changelog.

[0.37.1] - 2025-11-19

Fixed

  • Stack overflow on empty $ref value. #886

[0.37.0] - 2025-11-19

Added

  • evaluate() top-level function for convenient access to structured validation output.
  • CLI: Schema-only validation now also validates all referenced schemas. #804
  • Support for additional contentEncoding values per RFC 4648: base64url, base32, base32hex, and base16. These encodings are now validated alongside the existing base64 support in Draft 6 and 7. #26
  • validator.iter_errors(instance).into_errors(). It returns a ValidationErrors type that collects validation errors and implements std::error::Error. #451

Changed

  • BREAKING: ValidationError fields are private; use instance(), kind(), instance_path(), and schema_path() instead of accessing struct fields directly.
  • BREAKING: ErrorIterator is now a newtype wrapper instead of Box<dyn ValidationErrorIterator>.

Performance

  • validate and other APIs returning Result<_, ValidationError> are 5–10% faster in some workloads due to the smaller error handle.
  • evaluate: Avoiding deep clones of unmatched keyword values (e.g., title, description, examples) on every schema node evaluation by using Arc internally. Can be multiple times faster for schemas with large annotations.

[0.36.0] - 2025-11-18

Added

  • CLI: Structured --output flag|list|hierarchical modes now stream newline-delimited JSON records with schema/instance metadata plus JSON Schema Output v1 payloads (default text output remains human-readable).
  • CLI: --errors-only flag to suppress successful validation output and only show failures.
  • CLI: When invoked with only a schema file (no instances), validates the schema against its meta-schema. #804
  • New Validator::evaluate() API exposes JSON Schema Output v1 (flag/list/hierarchical) reports along with iterator helpers for annotations and errors.
  • meta::validator_for() function to build validators for meta-schema validation with full Validator API access.
  • Validator now implements Clone. #809

Removed

  • Validator::apply(), Output, and BasicOutput types have been removed in favor of the richer evaluate() API.

[0.35.0] - 2025-11-16

Added

  • Support for custom meta-schemas. Schemas with custom $schema URIs can now be used by registering their meta-schemas in the Registry via jsonschema::options().with_registry(). #664
  • arbitrary-precision feature for exact numeric validation of large integers and decimals beyond standard floating-point limits. #103
  • Support for HTTPS $schema URIs for drafts 04, 06, and 07 (e.g., https://json-schema.org/draft-07/schema). #802

Changed

... (truncated)

Commits
  • 0c276ef chore(rust): Release 0.37.1
  • 24cc6e2 fix: Stack overflow on empty $ref value
  • 9469072 chore(python): Release 0.37.0
  • 9cef68e chore(rust): Release 0.37.0
  • cb083dd build(deps): bump crates/jsonschema/tests/suite
  • e8453ac build(deps): bump crates/jsonschema-referencing/tests/suite
  • 4b932ca chore: Rework error iterator
  • c2341f1 feat: Support more content encodings
  • 1c89b62 feat(python): Support for decimal.Decimal type in both schemas and instances
  • eff59e8 feat(cli): Schema-only validation now also validates all referenced schemas
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Updates the requirements on [jsonschema](https://github.com/Stranger6667/jsonschema) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@rust-v0.32.0...cli-v0.37.1)

---
updated-dependencies:
- dependency-name: jsonschema
  dependency-version: 0.37.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 24, 2025

Labels

The following labels could not be found: dependencies, rust. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant