chore(deps): bump jsonschema from 4.25.1 to 4.26.0#5722
chore(deps): bump jsonschema from 4.25.1 to 4.26.0#5722dependabot[bot] wants to merge 1 commit intounstablefrom
Conversation
Bumps [jsonschema](https://github.com/python-jsonschema/jsonschema) from 4.25.1 to 4.26.0. - [Release notes](https://github.com/python-jsonschema/jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst) - [Commits](python-jsonschema/jsonschema@v4.25.1...v4.26.0) --- updated-dependencies: - dependency-name: jsonschema dependency-version: 4.26.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
rtibblesbot
left a comment
There was a problem hiding this comment.
Dependency Update Review
Package: jsonschema 4.25.1 → 4.26.0
Semver risk: Minor
Dependency type: Production (direct dependency in requirements.in)
CI status: Passing
Changelog Analysis
Sources consulted:
Single functional change: lazy import of urllib.request to reduce import time (#1416). The rest is CI/tooling maintenance.
Breaking changes: None.
Deprecations: None.
Security fixes: None.
Transitive dependency: rpds-py bumped 0.24.0 → 0.30.0 (Rust-backed persistent data structures used by jsonschema). No API-facing changes relevant to this project.
Compatibility Assessment
- Project uses affected APIs: No — the lazy import change is internal.
- Peer dependency changes: None.
- Code changes required: None.
- Prior failed attempts: None.
Recommendation
APPROVE — Low-risk minor bump with a single internal optimization. CI passing.
@rtibblesbot's comments are generated by an LLM, and should be evaluated accordingly
How was this generated?
Reviewed the pull request diff checking for:
- Correctness: bugs, edge cases, undocumented behavior, resource leaks, hardcoded values
- Design: unnecessary complexity, naming, readability, comment accuracy, redundant state
- Architecture: duplicated concerns, minimal interfaces, composition over inheritance
- Testing: behavior-based assertions, mocks only at hard boundaries, accurate coverage
- Completeness: missing dependencies, unupdated usages, i18n, accessibility, security
- Principles: DRY (same reason to change), SRP, Rule of Three (no premature abstraction)
- Checked CI status and linked issue acceptance criteria
- For UI changes: inspected screenshots for layout, visual completeness, and consistency
Bumps jsonschema from 4.25.1 to 4.26.0.
Release notes
Sourced from jsonschema's releases.
Changelog
Sourced from jsonschema's changelog.
Commits
a727743Add a changelog entry for 4.26.6d28c13Update the lockfile.739499eUpdate pre-commit hooks.cb2d779Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-confige6bbbb7[pre-commit.ci] pre-commit autoupdated56037aMerge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...e54ce13Bump astral-sh/setup-uv from 7.1.4 to 7.1.61f7c9fbPartially update docs requirements.241aec9Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config2818efbApache-2.0 -> nongplDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)