chore(deps): bump jsonschema from 0.46.5 to 0.48.0 by dependabot[bot] · Pull Request #134 · KooshaPari/phenotype-journeys

dependabot · 2026-07-17T19:56:06Z

Bumps jsonschema from 0.46.5 to 0.48.0.

Release notes

[Python] Release 0.48.0

Fixed

meta.is_valid and meta.validate incorrectly accepted some Draft 2019-09 schemas that the meta-schema rejects.

Integers just outside the i64/u64 range incorrectly compared against numeric bounds through lossy f64 rounding (e.g. {"minimum": -9223372036854775808} accepted -9223372036854775809).

Performance

Faster multipleOf validation for integer instances with integer divisors, via integer arithmetic instead of floating-point modulo.

[Ruby] Release 0.48.0

Fixed

JSONSchema::Meta.valid? and JSONSchema::Meta.validate! incorrectly accepted some Draft 2019-09 schemas that the meta-schema rejects.

Integers just outside the i64/u64 range incorrectly compared against numeric bounds through lossy f64 rounding (e.g. {"minimum" => -9223372036854775808} accepted -9223372036854775809).

Performance

Faster multipleOf validation for integer instances with integer divisors, via integer arithmetic instead of floating-point modulo.

[Rust] Release 0.48.0

Added

iter_errors for #[jsonschema::validator]-generated validators.

Fixed

Per-branch context on generated anyOf and oneOf validation errors, matching runtime validators.

$recursiveRef in generated validators incorrectly resolved to the innermost $recursiveAnchor (it should resolve to the outermost one).

Integer instances just outside the i64/u64 range incorrectly compared against numeric bounds through lossy f64 rounding under arbitrary-precision (e.g. {"minimum": -9223372036854775808} accepted -9223372036854775809).

Changed

One canonical number spelling from canonical::json::to_string under arbitrary-precision ("1e-2" becomes "0.01", "1.50" becomes "1.5") and correctly-rounded float parsing (serde_json's float_roundtrip).

Performance

Faster multipleOf validation for integer instances with integer divisors, via integer arithmetic instead of floating-point modulo.

[Python] Release 0.47.0

Added

Free-threaded wheels for Python 3.15 (3.15t).

Optional iter_errors(instance) method on custom keyword validators for reporting multiple errors from a single keyword. #1071

Changed

Update pyo3 to 0.29.

Clearer import error on free-threaded Python when older pip installs the abi3 wheel. #1131

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.48.0] - 2026-07-16

Added

iter_errors for #[jsonschema::validator]-generated validators.

Fixed

Per-branch context on generated anyOf and oneOf validation errors, matching runtime validators.

$recursiveRef in generated validators incorrectly resolved to the innermost $recursiveAnchor (it should resolve to the outermost one).

Integer instances just outside the i64/u64 range incorrectly compared against numeric bounds through lossy f64 rounding under arbitrary-precision (e.g. {"minimum": -9223372036854775808} accepted -9223372036854775809).

Changed

One canonical number spelling from canonical::json::to_string under arbitrary-precision ("1e-2" becomes "0.01", "1.50" becomes "1.5") and correctly-rounded float parsing (serde_json's float_roundtrip).

Performance

Faster multipleOf validation for integer instances with integer divisors, via integer arithmetic instead of floating-point modulo.

[0.47.0] - 2026-07-08

Added

#[jsonschema::validator] attribute macro (behind the macros feature) that compiles a JSON Schema into is_valid and validate implementations at build time.

Keyword::iter_errors for reporting multiple validation errors from a single custom keyword. #1071

Changed

Bump MSRV to 1.85.0.

Performance

Faster meta-schema validation and schema compilation with the macros feature, via compile-time meta-schema validators.

Fixed

type under items asserted with the Validation vocabulary disabled.

Disabled vocabularies ignored for $ref targets without their own $schema (e.g. $defs entries).

[0.46.10] - 2026-07-05

Fixed

Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.

Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[0.46.9] - 2026-07-02

Fixed

... (truncated)

Commits

ab95859 chore(ruby): Release 0.48.0
11f01d3 chore(python): Release 0.48.0
e22ef91 chore(rust): Release 0.48.0
aefb962 fix: Integer instances just outside the i64/u64 range incorrectly compare...
87d5331 build(deps): bump crates/jsonschema/tests/suite
0c832d3 build(deps): bump crates/jsonschema-referencing/tests/suite
9be1914 build(deps): bump softprops/action-gh-release from 3.0.1 to 3.0.2
04b5c83 build(deps): bump ruby/setup-ruby from 1.316.0 to 1.318.0
14e1011 refactor: Unify regex limit wiring
b142355 docs: Update README
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Bump `jsonschema` dependency from 0.46 to 0.48

Updates Cargo.toml to use jsonschema 0.48 instead of 0.46, with the lockfile updated accordingly.

^{Macroscope summarized 4f51c13.}

Bumps [jsonschema](https://github.com/Stranger6667/jsonschema) from 0.46.5 to 0.48.0. - [Release notes](https://github.com/Stranger6667/jsonschema/releases) - [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md) - [Commits](Stranger6667/jsonschema@cli-v0.46.5...ruby-v0.48.0) --- updated-dependencies: - dependency-name: jsonschema dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-07-17T19:56:07Z

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

chatgpt-codex-connector · 2026-07-17T19:56:10Z

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

codeant-ai · 2026-07-17T19:56:11Z

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

socket-security · 2026-07-17T19:56:22Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	cargo/jsonschema@0.46.5 ⏵ 0.48.0	⁺¹

View full report

sonarqubecloud · 2026-07-17T19:56:35Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

cursor

Risk: medium. Cursor Bugbot was not present on this PR, so approval is based on policy and risk classification only. This jsonschema 0.46→0.48 bump includes validation behavior changes and is above the low-risk approval threshold; human review is needed. KooshaPari is already requested as reviewer; no additional reviewers were assigned.

_{Sent by Cursor Approval Agent: Pull Request Approver}

kilo-code-bot · 2026-07-17T20:09:15Z

 chrono = { version = "0.4", features = ["serde"] }
 clap = { version = "4.5", features = ["derive"] }
-jsonschema = "0.46"
+jsonschema = "0.48"


WARNING: jsonschema 0.47.0+ bumps the minimum supported Rust version to 1.85.0. Verify that rust-toolchain.toml or CI allows Rust 1.85+, otherwise this bump will fail to compile.

Reply with @kilocode-bot fix it to have Kilo Code address this issue.

kilo-code-bot · 2026-07-17T20:09:24Z

Code Review Summary

Status: 1 Warning Found | Recommendation: Address before merge

Overview

Severity	Count
WARNING	1

Issue Details (click to expand)

WARNING

File	Line	Issue
`Cargo.toml`	25	jsonschema 0.47.0+ bumps MSRV to Rust 1.85.0

Files Reviewed (2 files)

Cargo.toml - 1 warning
Cargo.lock - mechanical dependency updates

Consideration: jsonschema 0.48.0 introduces upstream behavioral changes (canonical number spelling under arbitrary-precision, $recursiveRef resolution fix in generated validators). Review the changelog for impacts if these features are used.

Fix these issues in Kilo Cloud

_{Reviewed by step-3.7-flash · Input: 67.6K · Output: 15.7K · Cached: 417.4K}

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 17, 2026

dependabot Bot requested a review from KooshaPari as a code owner July 17, 2026 19:56

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 17, 2026

dependabot Bot mentioned this pull request Jul 17, 2026

chore(deps): bump jsonschema from 0.46.5 to 0.47.0 #132

Closed

cursor Bot reviewed Jul 17, 2026

View reviewed changes

kilo-code-bot Bot reviewed Jul 17, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump jsonschema from 0.46.5 to 0.48.0#134

chore(deps): bump jsonschema from 0.46.5 to 0.48.0#134
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/jsonschema-0.48.0

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited by macroscopeapp Bot

Loading

Uh oh!

dependabot Bot commented on behalf of github Jul 17, 2026

Uh oh!

chatgpt-codex-connector Bot commented Jul 17, 2026

Uh oh!

codeant-ai Bot commented Jul 17, 2026

Uh oh!

socket-security Bot commented Jul 17, 2026

Uh oh!

sonarqubecloud Bot commented Jul 17, 2026

Uh oh!

cursor Bot left a comment

Uh oh!

kilo-code-bot Bot Jul 17, 2026

Uh oh!

kilo-code-bot Bot commented Jul 17, 2026 •

edited

Loading

WARNING

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jul 17, 2026 • edited by macroscopeapp Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[Python] Release 0.48.0

Fixed

Performance

[Ruby] Release 0.48.0

Fixed

Performance

[Rust] Release 0.48.0

Added

Fixed

Changed

Performance

[Python] Release 0.47.0

Added

Changed

[0.48.0] - 2026-07-16

Added

Fixed

Changed

Performance

[0.47.0] - 2026-07-08

Added

Changed

Performance

Fixed

[0.46.10] - 2026-07-05

Fixed

[0.46.9] - 2026-07-02

Fixed

Bump jsonschema dependency from 0.46 to 0.48

Uh oh!

dependabot Bot commented on behalf of github Jul 17, 2026

Labels

Uh oh!

chatgpt-codex-connector Bot commented Jul 17, 2026

Uh oh!

codeant-ai Bot commented Jul 17, 2026

Uh oh!

socket-security Bot commented Jul 17, 2026

Uh oh!

sonarqubecloud Bot commented Jul 17, 2026

Quality Gate passed

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

kilo-code-bot Bot Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

kilo-code-bot Bot commented Jul 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Overview

WARNING

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 17, 2026 •

edited by macroscopeapp Bot

Loading

Bump `jsonschema` dependency from 0.46 to 0.48

kilo-code-bot Bot commented Jul 17, 2026 •

edited

Loading