[dependabot]

Updates the requirements on jsonschema and referencing to permit the latest version.
Updates jsonschema to 0.59.0

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.59.0

Changed

• macOS arm64 wheel replaces the universal2 wheel.

Fixed

• Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
• canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
• canonicalize giving a different form for a oneOf depending on the order of its branches.
• canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
• canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
• canonicalize leaving an anyOf over many overlapping objects raw.
• canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
• Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
• canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

• canonicalize giving up sooner on an allOf over unions too wide to model.

Changelog

Sourced from jsonschema's changelog.

[0.59.0] - 2026-10-16

Added

• CLI: - as a path reads the schema or an instance from stdin.
• CLI: -V as the version flag; -v stays as an alias.

Changed

• CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
• CLI: Errors print to stderr instead of stdout.
• CLI: --version prints jsonschema-cli <VERSION> instead of Version: <VERSION>.

Fixed

• CLI: Panic when stdout is closed early, as in jsonschema-cli validate ... | head.
• CLI: Missing file path in the error for an unreadable instance in text output.
• CLI: jsonschema-cli bundle, jsonschema-cli dereference and jsonschema-cli canonicalize truncating the --output file when the write fails partway.
• CLI: jsonschema-cli validate --help describing --offline in terms of --resource, which validate does not accept.
• CLI: Error and warning messages suggesting jsonschema commands instead of the installed jsonschema-cli binary.
• Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
• canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
• canonicalize giving a different form for a oneOf depending on the order of its branches.
• canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
• canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
• canonicalize leaving an anyOf over many overlapping objects raw.
• canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
• canonicalize treating -0 as a value distinct from 0 under arbitrary-precision.
• Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
• canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

• canonicalize giving up sooner on an allOf over unions too wide to model.

[0.58.6] - 2026-10-06

Fixed

• \s in pattern missing most Unicode space separators and U+2028.
• ECMA regex character class literals being interpreted as Rust set operators.

[0.58.5] - 2026-10-02

Fixed

• canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.

[0.58.4] - 2026-10-01

... (truncated)

Commits

• bcaa7bd chore(ruby): Release 0.59.0
• d59ab79 chore(rust): Release 0.59.0
• dbd0a21 test: Unfinished regex matches in the Python and Ruby bindings
• 016982a fix: canonicalize treating regex matches the engine cannot finish as non-ma...
• ce96b23 fix: Generated validator errors from unfinished property-name pattern matches...
• 9578d4e fix: Generated validators counting unfinished pattern matches as non-matches
• 4fd30be fix: Unfinished regex match errors pointing at the root when only a later run...
• dba7cf7 fix: Unfinished patternProperties matches beside unevaluatedProperties co...
• b770233 fix: Unfinished patternProperties matches beside additionalProperties cou...
• 58282fa fix: Unfinished patternProperties matches skipping the property's subschema
• Additional commits viewable in compare view

Updates referencing to 0.59.0

Release notes

Sourced from referencing's releases.

[Python] Release 0.59.0

Changed

• macOS arm64 wheel replaces the universal2 wheel.

Fixed

• Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
• canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
• canonicalize giving a different form for a oneOf depending on the order of its branches.
• canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
• canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
• canonicalize leaving an anyOf over many overlapping objects raw.
• canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
• Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
• canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

• canonicalize giving up sooner on an allOf over unions too wide to model.

Changelog

Sourced from referencing's changelog.

[0.59.0] - 2026-10-16

Added

• CLI: - as a path reads the schema or an instance from stdin.
• CLI: -V as the version flag; -v stays as an alias.

Changed

• CLI: Exit status 3 for errors that prevent a verdict and 2 for usage errors, so 1 always means an invalid instance or schema.
• CLI: Errors print to stderr instead of stdout.
• CLI: --version prints jsonschema-cli <VERSION> instead of Version: <VERSION>.

Fixed

• CLI: Panic when stdout is closed early, as in jsonschema-cli validate ... | head.
• CLI: Missing file path in the error for an unreadable instance in text output.
• CLI: jsonschema-cli bundle, jsonschema-cli dereference and jsonschema-cli canonicalize truncating the --output file when the write fails partway.
• CLI: jsonschema-cli validate --help describing --offline in terms of --resource, which validate does not accept.
• CLI: Error and warning messages suggesting jsonschema commands instead of the installed jsonschema-cli binary.
• Canonicalizing several subschemas of one prepared document, where a $ref in a later output could point at another subschema.
• canonicalize leaving unevaluatedProperties or unevaluatedItems beside anyOf or oneOf raw.
• canonicalize giving a different form for a oneOf depending on the order of its branches.
• canonicalize output changing when canonicalized again, for a not over a $ref it cannot fully negate.
• canonicalize output changing when canonicalized again, for a oneOf whose branches reduce to the same $ref.
• canonicalize leaving an anyOf over many overlapping objects raw.
• canonicalize leaving dependencies or dependentRequired raw when their keys form a long chain or cycle.
• canonicalize treating -0 as a value distinct from 0 under arbitrary-precision.
• Regex matches the engine cannot finish, such as on reaching the backtrack limit, counted as non-matches, letting not or patternProperties accept invalid instances. #1715
• canonicalize treating regex matches the engine cannot finish as non-matches.

Performance

• canonicalize giving up sooner on an allOf over unions too wide to model.

[0.58.6] - 2026-10-06

Fixed

• \s in pattern missing most Unicode space separators and U+2028.
• ECMA regex character class literals being interpreted as Rust set operators.

[0.58.5] - 2026-10-02

Fixed

• canonicalize keeping a reference to a cycle of bare references under not or oneOf instead of treating it as accepting every value.

[0.58.4] - 2026-10-01

... (truncated)

Commits

• bcaa7bd chore(ruby): Release 0.59.0
• d59ab79 chore(rust): Release 0.59.0
• dbd0a21 test: Unfinished regex matches in the Python and Ruby bindings
• 016982a fix: canonicalize treating regex matches the engine cannot finish as non-ma...
• ce96b23 fix: Generated validator errors from unfinished property-name pattern matches...
• 9578d4e fix: Generated validators counting unfinished pattern matches as non-matches
• 4fd30be fix: Unfinished regex match errors pointing at the root when only a later run...
• dba7cf7 fix: Unfinished patternProperties matches beside unevaluatedProperties co...
• b770233 fix: Unfinished patternProperties matches beside additionalProperties cou...
• 58282fa fix: Unfinished patternProperties matches skipping the property's subschema
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions