Skip to content

chore(deps)(deps): Bump the prod group across 1 directory with 4 updates - #60

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-9e72995d20
Closed

chore(deps)(deps): Bump the prod group across 1 directory with 4 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/prod-9e72995d20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod group with 4 updates in the / directory: clap, toml, schemars and jsonschema.

Updates clap from 4.6.3 to 4.6.4

Release notes

Sourced from clap's releases.

v4.6.4

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3
Changelog

Sourced from clap's changelog.

[4.6.4] - 2026-07-21

Internal

  • Update to syn v3
Commits
  • 87ec1ad chore: Release
  • 78f2529 docs: Update changelog
  • b61f270 Merge pull request #6369 from Metbcy/fix/zsh-completion-ordering
  • 74c6666 fix(complete): Keep zsh candidate order
  • d142d8f Merge pull request #6360 from epage/string
  • ba89563 style: Prefer explicit string operations
  • bea966e Merge pull request #6359 from epage/man
  • b811986 chore(man):Remove unused required-features
  • 0010bf2 Merge pull request #6358 from clap-rs/renovate/crate-ci-typos-1.x
  • bab9b24 chore(deps): Update compatible (dev) (#6357)
  • Additional commits viewable in compare view

Updates toml from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0

Commits
  • beee9fe chore: Release
  • 16e2ac1 docs: Update changelog
  • 89f5541 fix(toml): preserve datetimes when deserializing Value (#1194)
  • 534039c fix(serde): Deserialize Value datetimes into typed targets
  • 6e45cef test(serde): Reproduce Value datetime deserialization error
  • 4ec099f chore: Release
  • 5a47a51 docs: Update changelog
  • da0911f perf(parser): Reduce over allocation by better tokens/byte ratio (#1193)
  • 26eb157 perf(parser): Reduce over allocation by better tokens/byte ratio
  • ca4c7bf chore(deps): Update Prek to v0.4.11 (#1191)
  • Additional commits viewable in compare view

Updates schemars from 1.2.1 to 1.2.2

Release notes

Sourced from schemars's releases.

v1.2.2

  • Update to syn 3 in schemars_derive
Changelog

Sourced from schemars's changelog.

[1.2.2] - 2026-07-27

  • Update to syn 3 in schemars_derive
Commits

Updates jsonschema from 0.48.1 to 0.49.2

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.49.2

Fixed

  • Canonical numeric bounds no float can hold are exposed as decimal.Decimal instead of a rounded, wider bound.

Performance

  • Faster serialization of canonicalized schemas.
  • Up to 70x faster canonicalize for multipleOf beside numeric bounds far from zero.

[Rust] Release 0.49.2

Performance

  • Faster serialization of canonicalized schemas.
  • Faster macro code generation for subschemas with many keywords.
  • Up to 70x faster canonicalization of multipleOf beside numeric bounds far from zero.

[Python] Release 0.49.1

Fixed

  • canonicalize rejecting pattern_options (it should take the same regex configuration as validators).

[Ruby] Release 0.49.1

Fixed

  • JSONSchema.canonicalize rejecting pattern_options (it should take the same regex configuration as validators).
  • InvalidPattern failures raising the base CanonicalizationError (they should raise JSONSchema::Canonical::InvalidPattern).

[Rust] Release 0.49.1

Fixed

  • jsonschema-value: Ruby builds on x64-mingw-ucrt.

[Python] Release 0.49.0

Added

  • Validation of recursive Python objects. #945
  • EXPERIMENTAL: Schema canonicalization via jsonschema::canonicalize. It reduces a reasonable subset of JSON Schemas to their normal forms.

Fixed

  • multipleOf incorrectly accepted integers past u64 that are not multiples of the divisor.
  • list subclasses incorrectly rejected as unsupported types.
  • Segmentation fault on enum members whose value resolves back to the member.

Performance

  • Up to 5x faster validation by working on Python objects directly instead of converting them to serde_json. #239
  • Up to 2x faster meta.is_valid / meta.validate by working on Python objects directly instead of converting them to serde_json.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.49.2] - 2026-07-28

Performance

  • Faster serialization of canonicalized schemas.
  • Faster macro code generation for subschemas with many keywords.
  • Up to 70x faster canonicalization of multipleOf beside numeric bounds far from zero.

[0.49.1] - 2026-07-25

Fixed

  • jsonschema-value: Ruby builds on x64-mingw-ucrt.

[0.49.0] - 2026-07-25

Added

  • Generic JSON input: options_for builds a validator over any instance representation implementing json::Json, so instances validate without conversion to serde_json::Value. #239
  • meta::validate_for and meta::is_valid_for for checking a schema document held in any representation implementing json::Json against its meta-schema.
  • EXPERIMENTAL: Schema canonicalization via jsonschema::canonicalize. It reduces a reasonable subset of JSON Schemas to their normal forms.

Fixed

  • multipleOf incorrectly accepted integers past u64 that are not multiples of the divisor.

[0.48.5] - 2026-07-22

Fixed

  • Packaging issue again.

[0.48.4] - 2026-07-22

Fixed

  • Packaging issue.

[0.48.3] - 2026-07-22

Changed

  • INTERNAL. Extract common JSON Schema semantic into a separate jsonschema-value crate.

Performance

  • Avoid map lookups in some properties validators.
  • Faster validation of {"type": "array", "items": {...}} schemas.

[0.48.2] - 2026-07-21

... (truncated)

Commits
  • 3fe5c3b chore(ruby): Release 0.49.2
  • c9ef386 chore(python): Release 0.49.2
  • d85e5f2 chore(rust): Release 0.49.2
  • f9040ec perf: Up to 70x faster canonicalization of multipleOf beside numeric bounds...
  • 21a3272 perf: Use arbitrary-precision for canonicalization benchmarks
  • 9cdec99 perf: Faster macro code generation for subschemas with many keywords
  • fad0015 perf: Tune codegen benchmarks
  • 8d23dd2 perf: Faster serialization of canonicalized schemas
  • bfe9ece perf: Extend benchmarks
  • 80a0d91 perf: Tune canonicalization benchmarks
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod group with 4 updates in the / directory: [clap](https://github.com/clap-rs/clap), [toml](https://github.com/toml-rs/toml), [schemars](https://github.com/GREsau/schemars) and [jsonschema](https://github.com/Stranger6667/jsonschema).


Updates `clap` from 4.6.3 to 4.6.4
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.3...clap_complete-v4.6.4)

Updates `toml` from 1.1.3+spec-1.1.0 to 1.1.4+spec-1.1.0
- [Commits](toml-rs/toml@toml-v1.1.3...toml-v1.1.4)

Updates `schemars` from 1.2.1 to 1.2.2
- [Release notes](https://github.com/GREsau/schemars/releases)
- [Changelog](https://github.com/GREsau/schemars/blob/master/CHANGELOG.md)
- [Commits](GREsau/schemars@v1.2.1...v1.2.2)

Updates `jsonschema` from 0.48.1 to 0.49.2
- [Release notes](https://github.com/Stranger6667/jsonschema/releases)
- [Changelog](https://github.com/Stranger6667/jsonschema/blob/master/CHANGELOG.md)
- [Commits](Stranger6667/jsonschema@ruby-v0.48.1...ruby-v0.49.2)

---
updated-dependencies:
- dependency-name: clap
  dependency-version: 4.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: toml
  dependency-version: 1.1.4+spec-1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: schemars
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod
- dependency-name: jsonschema
  dependency-version: 0.49.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 29, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/prod-9e72995d20 branch July 29, 2026 19:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants