[dependabot]

Bumps jsonschema from 0.58.6 to 0.60.0.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.60.0

Added

• Support for Python 3.15.

Changed

• Update pyo3 to 0.30.
• canonicalize and canonical.find_unsatisfiable take schema positionally only, like bundle and dereference.

Fixed

• Type stubs rejecting valid usage: dict | bool schemas, ReferencingError in except, match on error kinds.
• import jsonschema_rs.canonical.json and import jsonschema_rs.canonical.schema raising ModuleNotFoundError.
• inspect.signature of validator and Evaluation methods missing self.
• ValidationErrorKind reporting builtins as its module.
• validator_for returning instances that fail isinstance checks against Validator and draft classes.

Performance

• Validation with unfinished regex matches running each such match once instead of once per run, and comparing errors across runs in linear time instead of quadratic. #1784
• items and additionalProperties looking up a single-keyword subschema once per array or object instead of once per value.
• is_valid and validate reading fewer cache lines per subschema, by keeping error locations apart from validators.
• is_valid on recursive schemas caching only $ref results that took many steps to compute, instead of every one.
• Error evaluation paths taking memory linear in the $ref nesting depth, not quadratic. #1778

[Ruby] Release 0.60.0

Performance

• Validation with unfinished regex matches running each such match once instead of once per run, and comparing errors across runs in linear time instead of quadratic. #1784
• items and additionalProperties looking up a single-keyword subschema once per array or object instead of once per value.
• is_valid and validate reading fewer cache lines per subschema, by keeping error locations apart from validators.
• is_valid on recursive schemas caching only $ref results that took many steps to compute, instead of every one.
• Error evaluation paths taking memory linear in the $ref nesting depth, not quadratic. #1778

[Rust] Release 0.60.0

Changed

• ValidationErrorKind::Enum and ValidationErrorKind::Constant holding their values as Arc<Value> shared with the validator, instead of a copy per error. #1777

Performance

• Validation with unfinished regex matches running each such match once instead of once per run, and comparing errors across runs in linear time instead of quadratic. #1784
• items and additionalProperties looking up a single-keyword subschema once per array or object instead of once per value.
• is_valid and validate reading fewer cache lines per subschema, by keeping error locations apart from validators.
• is_valid on recursive schemas caching only $ref results that took many steps to compute, instead of every one.
• Error evaluation paths taking memory linear in the $ref nesting depth, not quadratic. #1778

[Python] Release 0.59.0

Changed

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.60.0] - 2026-10-22

Changed

• ValidationErrorKind::Enum and ValidationErrorKind::Constant holding their values as Arc<Value> shared with the validator, instead of a copy per error. #1777

Performance

• Validation with unfinished regex matches running each such match once instead of once per run, and comparing errors across runs in linear time instead of quadratic. #1784
• items and additionalProperties looking up a single-keyword subschema once per array or object instead of once per value.
• is_valid and validate reading fewer cache lines per subschema, by keeping error locations apart from validators.
• is_valid on recursive schemas caching only $ref results that took many steps to compute, instead of every one.
• Error evaluation paths taking memory linear in the $ref nesting depth, not quadratic. #1778

[0.59.0] - 2026-10-16

Added

• CLI: - as a path reads the schema or an instance from stdin.
• CLI: -V as the version flag; -v stays as an alias.

Changed

• CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
• CLI: Errors print to stderr instead of stdout.
• CLI: --version prints jsonschema-cli <VERSION> instead of Version: <VERSION>.

Fixed

• CLI: Panic when stdout is closed early, as in jsonschema-cli validate ... | head.
• CLI: Missing file path in the error for an unreadable instance in text output.
• CLI: jsonschema-cli bundle, jsonschema-cli dereference and jsonschema-cli canonicalize truncating the --output file when the write fails partway.
• CLI: jsonschema-cli validate --help describing --offline in terms of --resource, which validate does not accept.
• CLI: Error and warning messages suggesting jsonschema commands instead of the installed jsonschema-cli binary.
• Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
• canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
• canonicalize giving a different form for a oneOf depending on the order of its branches.
• canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
• canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
• canonicalize leaving an anyOf over many overlapping objects raw.
• canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
• canonicalize treating -0 as a value distinct from 0 under arbitrary-precision.
• Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
• canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

• canonicalize giving up sooner on an allOf over unions too wide to model.

Commits

• edbbbea chore(ruby): Release 0.60.0
• 316613f chore(rust): Release 0.60.0
• 8663eb3 build(deps): bump crates/jsonschema-referencing/tests/suite
• a809fc9 build(deps): bump wasm-bindgen in /
• 53c07f9 build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
• 20970da build(deps): bump crates/jsonschema/tests/suite
• cde346b build(deps): bump taiki-e/install-action from 2.87.22 to 2.87.29
• 9937c39 build(deps): bump ruby/setup-ruby from 1.328.0 to 1.329.0
• 9f7dd4f perf: Run each unfinished regex match once and compare errors across runs in ...
• 2639f66 fix: validator_for returning instances that fail isinstance checks agains...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)