chore(deps): bump jsonschema from 0.17.1 to 0.48.5

[dependabot]

Bumps jsonschema from 0.17.1 to 0.48.5.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.48.5

Performance

• Avoid map lookups in some properties validators.
• Faster validation of {"type": "array", "items": {...}} schemas.

[Ruby] Release 0.48.5

Performance

• Avoid map lookups in some properties validators.
• Faster validation of {"type": "array", "items": {...}} schemas.

[Rust] Release 0.48.5

Changed

• INTERNAL. Extract common JSON Schema semantic into a separate jsonschema-value crate.

Performance

• Avoid map lookups in some properties validators.
• Faster validation of {"type": "array", "items": {...}} schemas.

[Python] Release 0.48.2

Performance

• Faster validator compilation by pre-sizing internal caches.

[Ruby] Release 0.48.2

Fixed

• Canonical::JSON.to_string incorrectly emitting exponent form for small Float values (e.g. 1e-7 instead of 0.0000001).

Performance

• Faster validator compilation by pre-sizing internal caches.

[Rust] Release 0.48.2

Performance

• Faster validator compilation by pre-sizing internal caches.

[Python] Release 0.48.1

Fixed

• Missing required errors in evaluate() output for schemas with properties and a two-entry required array. #1220
• contentEncoding errors for invalid UTF-8 after decoding incorrectly had empty instance_path and schema_path.

[Ruby] Release 0.48.1

Fixed

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.48.5] - 2026-07-22

Fixed

• Packaging issue again.

[0.48.4] - 2026-07-22

Fixed

• Packaging issue.

[0.48.3] - 2026-07-22

Changed

• INTERNAL. Extract common JSON Schema semantic into a separate jsonschema-value crate.

Performance

• Avoid map lookups in some properties validators.
• Faster validation of {"type": "array", "items": {...}} schemas.

[0.48.2] - 2026-07-21

Performance

• Faster validator compilation by pre-sizing internal caches.

[0.48.1] - 2026-07-17

Fixed

• Missing required errors in evaluate() output for schemas with properties and a two-entry required array. #1220
• contentEncoding errors for invalid UTF-8 after decoding incorrectly had empty instance_path and schema_path.

Performance

• Faster code generation for #[jsonschema::validator] (~5% across benchmarked schemas), via aliasing repeated paths in the emitted code.

[0.48.0] - 2026-07-16

Added

• iter_errors for #[jsonschema::validator]-generated validators.

Fixed

• Per-branch context on generated anyOf and oneOf validation errors, matching runtime validators.
• $recursiveRef in generated validators incorrectly resolved to the innermost $recursiveAnchor (it should resolve to the outermost one).

... (truncated)

Commits

• 0f09bc8 chore(ruby): Release 0.48.5
• 59bae39 chore(ruby): Update schema canonicalization implementation
• a27c665 chore(python): Release 0.48.5
• 91c8983 chore(rust): Release 0.48.5
• 09aea02 fix: packaging
• cb73267 chore(rust): Release 0.48.4
• f4e8036 chore(rust): Release 0.48.3
• bc07aaf refactor: Extract uniqueItems logic into jsonschema-value
• 8018ed8 feat: Support exclusive bounds in canonicalization
• 36ac56f refactor: Canonicalization semantics
• Additional commits viewable in compare view

[github-actions]

Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts.

[github-actions]

Policy Coverage Report

Tools Coverage: 100%
Events Coverage: 100%
Egress Labeled: 100%
Replay Determinism: 100%

All policy gates passed successfully!

[github-actions]

SBOM Security Report

Total Packages: 4571

Language Distribution:

• go: 359
• javascript: 3278
• rust: 628
• python: 1

License Distribution:

• MIT: 1269
• Apache-2.0: 46
• CC0-1.0: 43
• BSD-3-Clause: 34
• ISC: 87
• BSD-2-Clause: 41
• Python-2.0: 2
• MPL-2.0: 1
• Unlicense: 5
• CC-BY-4.0: 1
• (Apache-2.0 OR MPL-1.1): 1
• BlueOak-1.0.0: 3
• (AFL-2.1 OR BSD-3-Clause): 2
• (BSD-3-Clause OR GPL-2.0): 1
• 0BSD: 3
• (MIT OR CC0-1.0): 4
• MIT AND ISC: 1

✅ SBOM generated successfully
✅ No GPL licenses detected
✅ No high/critical vulnerabilities found

[fraware]

Deferred to a dedicated deps wave.

This bump is non-trivial (major/minor jump, lockfile churn, and/or grouped updates). Please leave open until a coordinated tip rebase has green CI; do not land opportunistically.

[github-actions]

Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts.

[github-actions]

SBOM Security Report

Total Packages: 3328

Language Distribution:

• go: 323
• javascript: 2005
• rust: 694
• python: 1

License Distribution:

• MIT: 1319
• Apache-2.0: 44
• BSD-3-Clause: 43
• CC0-1.0: 43
• ISC: 84
• BSD-2-Clause: 39
• Python-2.0: 1
• MPL-2.0: 1
• Unlicense: 3
• CC-BY-4.0: 1
• (Apache-2.0 OR MPL-1.1): 1
• BlueOak-1.0.0: 3
• (AFL-2.1 OR BSD-3-Clause): 1
• (BSD-3-Clause OR GPL-2.0): 1
• (MIT AND Zlib): 1
• (MIT AND BSD-3-Clause): 1
• 0BSD: 4
• (MIT OR CC0-1.0): 3
• MIT AND ISC: 1

✅ SBOM generated successfully
✅ No GPL licenses detected
✅ No high/critical vulnerabilities found

[github-actions]

Policy Coverage Report

Tools Coverage: 100%
Events Coverage: 100%
Egress Labeled: 100%
Replay Determinism: 100%

All policy gates passed successfully!