[dependabot]

Bumps jsonschema from 0.47.0 to 0.58.2.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.58.2

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[Ruby] Release 0.58.2

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[Rust] Release 0.58.2

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[Python] Release 0.58.1

Fixed

• Crash in canonical.json.to_string on free-threaded Python when another thread resized a list or dict. #1664
• Crash when an Enum member's value override, a custom keyword or a custom format emptied a list or dict holding the instance being read, during validation, schema conversion or canonical.json.to_string.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property.

[Ruby] Release 0.58.1

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.

[Rust] Release 0.58.1

Fixed

• Crash in Pyo3 validators when an Enum member's value override emptied a list or dict holding the instance being read.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property in Pyo3 validators.

[Python] Release 0.58.0

Performance

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.58.2] - 2026-09-28

Fixed

• $dynamicRef targets in another document resolving relative references and reporting absolute keyword locations against the referencing document.
• $ref to an $anchor or fragment $id validating against another anchor in the same document. #1668
• schema_path of errors under a $ref or $dynamicRef to a named schema pointing at the resource root instead of that schema.

[0.58.1] - 2026-09-26

Fixed

• Crash in Pyo3 validators when an Enum member's value override emptied a list or dict holding the instance being read.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property in Pyo3 validators.

[0.58.0] - 2026-09-25

Added

• backend = Pyo3 on #[jsonschema::validator], generating a validator that reads Python objects in place.
• backend = Magnus on #[jsonschema::validator], generating a validator that reads Ruby objects in place.
• jsonschema::meta::pyo3, the bundled meta-schema validators for a schema held as a Python object.
• jsonschema::meta::magnus, the bundled meta-schema validators for a schema held as a Ruby object.
• methods = { ... } on #[jsonschema::validator], selecting which of is_valid, validate, and iter_errors are generated.
• json::Jsonb, validating a Postgres jsonb value in place, behind the jsonb feature.

Performance

• oneOf and anyOf whose branches each require a property fixed to a distinct string validate only the branch matching the instance's value.
• Generated validate checks required in the same pass over an object as properties, instead of looking up each required name.

Fixed

• A oneOf over $ref branches beside a sibling none of them admits, which canonicalized to an allOf instead of false.
• multipleOf incorrectly accepted 1e-400 and other magnitudes below the smallest f64 subnormal with arbitrary-precision (they are not zero).
• Numeric keywords panicked on a custom representation holding a number past f64 without arbitrary-precision.

[0.57.0] - 2026-09-22

Added

• PreparedDocument::unsatisfiable, naming the keywords that leave each unsatisfiable subschema empty and where they are.

Changed

• PreparedDocument::unsatisfiable_pointers is replaced by PreparedDocument::unsatisfiable.

... (truncated)

Commits

• b839b37 chore(ruby): Release 0.58.2
• 3d48b90 chore(rust): Release 0.58.2
• fcf4fb3 build(deps): bump crates/jsonschema/tests/suite
• b8d917d build(deps): update hegeltest requirement from 0.46 to 0.47
• ed5d2ac build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0
• 571f71e build(deps): bump taiki-e/install-action from 2.87.15 to 2.87.20
• c6bb14f build(deps): bump ruby/setup-ruby from 1.324.0 to 1.327.0
• 3b75f55 build(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1
• 8b38ace build(deps): bump crate-ci/typos from 1.50.2 to 1.50.3
• 45afaef fix: Resolve dynamic anchors in another document against that document
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[chatgpt-codex-connector]

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Repo admins can enable using credits for code reviews in their settings.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: flyingrobots/wesley/.coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 51d605cd-3380-4373-bb6f-53dafe2d827d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🔍 The Case of Pull Request #842

Schema Sets

• ecommerce
• reference

Schema Set ecommerce

Plain-English Readout

• Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
• Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
• Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.

🕵️ SHA-lock HOLMES full report for ecommerce (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for ecommerce (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for ecommerce (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.

---

Schema Set reference

Plain-English Readout

• Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
• Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
• Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.

🕵️ SHA-lock HOLMES full report for reference (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for reference (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for reference (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.

---

📚 Glossary (what the Holmes terms mean)

• HOLMES: Wesley’s main evidence investigation. It decides whether the cited proof is strong enough to justify shipping this commit.
• WATSON: An independent verification pass. It checks Holmes’s citations and score math instead of trusting them blindly.
• MORIARTY: A readiness forecast over time. It is advisory trend analysis, not the release gate itself.
• Schema coverage score (SCS): How much of the schema has direct supporting evidence across generated artifacts and cited proof.
• Test confidence index (TCI): How much test evidence exists for constraints, policies, relationships, and operations.
• Migration risk index (MRI): How risky the schema change is to roll out. Lower is better.
• Evidence trust: Whether the report is backed by exact citations, whole-file citations, or coarse references. Weak trust means the claim may be directionally right but not specific enough to trust blindly.
• Citation quality: A count of exact line-span citations versus whole-file or coarse references.
• ELEMENTARY: Ready to ship based on the current evidence.
• REQUIRES INVESTIGATION: More work or review is needed before shipping.
• YOU SHALL NOT PASS: Do not ship this change in its current state.

---

Machine-readable reports are grouped by schema set in workflow artifacts.

---

Filed at 221B Repository Street

[dependabot]

Superseded by #843.