chore(deps): bump jsonschema from 0.17.1 to 0.46.10

[dependabot]

Bumps jsonschema from 0.17.1 to 0.46.10.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Ruby] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Rust] Release 0.46.10

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[Python] Release 0.46.9

Fixed

• Stack overflow while preparing a registry containing deeply nested schema documents.

[Ruby] Release 0.46.9

Fixed

• Stack overflow while preparing a registry containing deeply nested schema documents.

[Rust] Release 0.46.9

Fixed

• multipleOf incorrectly rounds integer instances above 2^53 to f64 before the divisibility check on builds without the arbitrary-precision feature.
• Stack overflow while preparing a registry containing deeply nested schema documents.

[Python] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Ruby] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Rust] Release 0.46.8

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[Python] Release 0.46.7

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.46.10] - 2026-07-05

Fixed

• Stack overflow with a self-referential $dynamicRef combined with unevaluatedProperties or unevaluatedItems.
• Incorrect unevaluatedProperties and unevaluatedItems results when a meta-schema disables the Applicator vocabulary.

[0.46.9] - 2026-07-02

Fixed

• multipleOf incorrectly rounds integer instances above 2^53 to f64 before the divisibility check on builds without the arbitrary-precision feature.
• Stack overflow while preparing a registry containing deeply nested schema documents.

[0.46.8] - 2026-07-01

Fixed

• idn-email format rejected non-ASCII characters in quoted local parts (e.g. "δοκιμή"@example.com).

[0.46.7] - 2026-06-30

Fixed

• idn-hostname format accepted A-labels that decode to a disallowed code point (e.g. xn--7a).

[0.46.6] - 2026-06-24

Added

• IntoRegistryResource for Arc<Value>. #1129

Fixed

• prefixItems incorrectly recognised as a known keyword in Draft 2019-09 and earlier (it is 2020-12 only).
• pattern validation errors displayed the internally translated regex instead of the original schema pattern. #1149

[0.46.5] - 2026-05-13

Fixed

• Percent-encoded characters in $ref URI fragments (e.g. #/$defs/Request%20class) are now decoded when stored as schema_path.

[0.46.4] - 2026-05-01

Fixed

• Panic in the regex engine when matching against patterns with very large {0,N} quantifiers.

[0.46.3] - 2026-04-28

... (truncated)

Commits

• 6b7087e chore(ruby): Release 0.46.10
• a722ef5 chore(python): Release 0.46.10
• ecaecea chore(rust): Release 0.46.10
• 571e22b fix: Incorrect unevaluatedProperties and unevaluatedItems results when a ...
• 99cbafc chore: Unify codecov configs
• 91037c6 fix: Stack overflow with a self-referential $dynamicRef combined with `unev...
• a743a33 chore(ruby): Release 0.46.9
• 099cdd0 chore(python): Release 0.46.9
• b6c58f4 chore(rust): Release 0.46.9
• 1d78785 refactor: Extract jsonschema-regex crate
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts.

[github-actions]

Policy Coverage Report

Tools Coverage: 100%
Events Coverage: 100%
Egress Labeled: 100%
Replay Determinism: 100%

All policy gates passed successfully!

[github-actions]

SBOM Security Report

Total Packages: 4571

Language Distribution:

• go: 359
• javascript: 3278
• rust: 628
• python: 1

License Distribution:

• MIT: 1269
• Apache-2.0: 46
• CC0-1.0: 43
• BSD-3-Clause: 34
• ISC: 87
• BSD-2-Clause: 41
• Python-2.0: 2
• MPL-2.0: 1
• Unlicense: 5
• CC-BY-4.0: 1
• (Apache-2.0 OR MPL-1.1): 1
• BlueOak-1.0.0: 3
• (AFL-2.1 OR BSD-3-Clause): 2
• (BSD-3-Clause OR GPL-2.0): 1
• 0BSD: 3
• (MIT OR CC0-1.0): 4
• MIT AND ISC: 1

✅ SBOM generated successfully
✅ No GPL licenses detected
✅ No high/critical vulnerabilities found