deps(deps): bump jsonschema from 0.47.0 to 0.49.6

[dependabot]

Bumps jsonschema from 0.47.0 to 0.49.6.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.49.6

Added

• Canonicalization of a negated uniqueItems, where the complement demands a repeated element under the length floor two elements imply.
• Canonicalization of a negated array tuple, where each position's complement stands under the length that reaches it.
• Canonicalization of contains demands sharing no value, where their counts add up into a length floor.
• CanonicalSchema.negate through references, where the complement of the resolved target takes the reference's place.
• Canonicalization of negated propertyNames and additionalProperties, where the complement spells the violating-key demand instead of a not residual.
• Canonicalization of negated additionalProperties under Draft 4, where the violating-key demand spells the closed property map.
• Canonicalization of not a reference, where the complement of the resolved target takes the pointer's place.
• Canonicalization of a negated oneOf, where the complement spells the values no branch admits beside the values two branches share.
• Canonicalization of negated items under Draft 4, where the violating-element demand spells the barred element schema.

Changed

• ArrayView reports distinctness in three states, so an array demanding a repeated element reads apart from one demanding distinct elements.

Fixed

• CanonicalSchema.negate keeping a root self-reference in the complement, where it points at the complement instead of the source.
• An additionalItems that tails no tuple keeping the whole document unmodeled under Draft 2020-12.

[Ruby] Release 0.49.6

Added

• Canonicalization of a negated uniqueItems, where the complement demands a repeated element under the length floor two elements imply.
• Canonicalization of a negated array tuple, where each position's complement stands under the length that reaches it.
• Canonicalization of contains demands sharing no value, where their counts add up into a length floor.
• CanonicalSchema#negate through references, where the complement of the resolved target takes the reference's place.
• Canonicalization of negated propertyNames and additionalProperties, where the complement spells the violating-key demand instead of a not residual.
• Canonicalization of negated additionalProperties under Draft 4, where the violating-key demand spells the closed property map.
• Canonicalization of not a reference, where the complement of the resolved target takes the pointer's place.
• Canonicalization of a negated oneOf, where the complement spells the values no branch admits beside the values two branches share.
• Canonicalization of negated items under Draft 4, where the violating-element demand spells the barred element schema.

Changed

• ArrayView reports distinctness in three states, so an array demanding a repeated element reads apart from one demanding distinct elements.

Fixed

• CanonicalSchema#negate keeping a root self-reference in the complement, where it points at the complement instead of the source.
• An additionalItems that tails no tuple keeping the whole document unmodeled under Draft 2020-12.

[Rust] Release 0.49.6

Added

• Canonicalization of a negated uniqueItems, where the complement demands a repeated element under the length floor two elements imply.
• Canonicalization of a negated array tuple, where each position's complement stands under the length that reaches it.
• Canonicalization of contains demands sharing no value, where their counts add up into a length floor.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.49.6] - 2026-08-06

Added

• Canonicalization of a negated uniqueItems, where the complement demands a repeated element under the length floor two elements imply.
• Canonicalization of a negated array tuple, where each position's complement stands under the length that reaches it.
• Canonicalization of contains demands sharing no value, where their counts add up into a length floor.
• CanonicalSchema::negate through references, where the complement of the resolved target takes the reference's place.
• Canonicalization of negated propertyNames and additionalProperties, where the complement spells the violating-key demand instead of a not residual.
• Canonicalization of negated additionalProperties under Draft 4, where the violating-key demand spells the closed property map.
• Canonicalization of not a reference, where the complement of the resolved target takes the pointer's place.
• Canonicalization of a negated oneOf, where the complement spells the values no branch admits beside the values two branches share.
• Canonicalization of negated items under Draft 4, where the violating-element demand spells the barred element schema.

Changed

• ArrayView reports distinctness in three states, so an array demanding a repeated element reads apart from one demanding distinct elements.

Fixed

• CanonicalSchema::negate keeping a root self-reference in the complement, where it points at the complement instead of the source.
• An additionalItems that tails no tuple keeping the whole document unmodeled under Draft 2020-12.

[0.49.5] - 2026-08-05

Added

• Canonicalization of not an integer schema under Draft 4, which the number leaf carries as barred integers.
• Canonicalization of not a multipleOf, which numeric leaves carry as barred divisors.
• Canonicalization of not an integer schema, where a barred divisor of one spells the non-integer numbers.
• Canonicalization of not a pattern, which string leaves carry as barred patterns.
• Canonicalization of not a typed value set under Draft 4, such as {"type": "integer", "enum": [1, 2]}.
• CanonicalSchema::is_subset_of, whether the other schema admits every value this one admits.
• Canonicalization of a reference cycle carrying no assertion, which admits every value.

Fixed

• CanonicalSchema::is_subset_of failing to prove a union of array branches a subset of itself.
• CanonicalSchema::intersect admitting values one side rejects when its additionalProperties governs the keys the other side's patternProperties match.
• A satisfiable multipleOf schema collapsing to the empty set when f64 rounds its bounds together.
• Two spellings of one number canonicalizing to different texts under arbitrary-precision when the fraction exceeds the expansion cap.
• Numeric bounds and multipleOf comparing values through a lossy f64 conversion under arbitrary-precision, such as 1e-400 passing {"maximum": 0}.
• A union branch left unabsorbed when a sibling complement shed a conjunct from another branch.
• A union keeping an integer branch beside a number branch that admits every value of it.

[0.49.4] - 2026-08-04

Added

• Canonicalization of not a string format, which the string leaf carries as barred formats.

... (truncated)

Commits

• 7888cb4 chore(ruby): Release 0.49.6
• d57a7e0 chore(python): Release 0.49.6
• eaeb5b3 chore(rust): Release 0.49.6
• d87ab9b fix: An additionalItems that tails no tuple keeping the whole document unmo...
• b31c404 feat: Canonicalization of a negated uniqueItems, where the complement deman...
• cbcf755 build(deps): bump crates/jsonschema/tests/suite
• d89a297 build(deps): bump crate-ci/typos from 1.48.0 to 1.49.0
• 8285c96 feat: Canonicalization of a negated array tuple, where each position's comple...
• 05d579c feat: Canonicalization of negated items under Draft 4, where the violating-...
• 8c53ddb feat: Canonicalization of a negated oneOf, where the complement spells the ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: rust. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

🔍 The Case of Pull Request #780

Schema Sets

• ecommerce
• reference

Schema Set ecommerce

Plain-English Readout

• Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
• Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
• Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.

🕵️ SHA-lock HOLMES full report for ecommerce (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for ecommerce (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for ecommerce (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.

---

Schema Set reference

Plain-English Readout

• Holmes (evidence investigation): The Holmes report is unavailable because the workflow finished without a readable holmes-report.json artifact.
• Watson (independent verification): The Watson report is unavailable because the workflow finished without a readable watson-report.json artifact.
• Moriarty (trend forecast): The Moriarty forecast is unavailable because the workflow finished without a readable moriarty-report.json artifact.

Suggested next actions

1. Regenerate the HOLMES artifacts and make sure holmes-report.json is uploaded before trusting this PR summary.
2. Regenerate the WATSON artifacts and make sure watson-report.json is uploaded before trusting this PR summary.
3. Regenerate the MORIARTY artifacts and make sure moriarty-report.json is uploaded before trusting this PR summary.

🕵️ SHA-lock HOLMES full report for reference (click to expand)

Report unavailable for holmes: readable holmes-report.md artifact not found.

🩺 Dr. WATSON full report for reference (click to expand)

Report unavailable for watson: readable watson-report.md artifact not found.

🔮 Professor MORIARTY full report for reference (click to expand)

Report unavailable for moriarty: readable moriarty-report.md artifact not found.

---

📚 Glossary (what the Holmes terms mean)

• HOLMES: Wesley’s main evidence investigation. It decides whether the cited proof is strong enough to justify shipping this commit.
• WATSON: An independent verification pass. It checks Holmes’s citations and score math instead of trusting them blindly.
• MORIARTY: A readiness forecast over time. It is advisory trend analysis, not the release gate itself.
• Schema coverage score (SCS): How much of the schema has direct supporting evidence across generated artifacts and cited proof.
• Test confidence index (TCI): How much test evidence exists for constraints, policies, relationships, and operations.
• Migration risk index (MRI): How risky the schema change is to roll out. Lower is better.
• Evidence trust: Whether the report is backed by exact citations, whole-file citations, or coarse references. Weak trust means the claim may be directionally right but not specific enough to trust blindly.
• Citation quality: A count of exact line-span citations versus whole-file or coarse references.
• ELEMENTARY: Ready to ship based on the current evidence.
• REQUIRES INVESTIGATION: More work or review is needed before shipping.
• YOU SHALL NOT PASS: Do not ship this change in its current state.

---

Machine-readable reports are grouped by schema set in workflow artifacts.

---

Filed at 221B Repository Street

[dependabot]

Superseded by #781.