[dependabot]

Bumps jsonschema from 0.58.0 to 0.58.1.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.58.1

Fixed

• Crash in canonical.json.to_string on free-threaded Python when another thread resized a list or dict. #1664
• Crash when an Enum member's value override, a custom keyword or a custom format emptied a list or dict holding the instance being read, during validation, schema conversion or canonical.json.to_string.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property.

[Ruby] Release 0.58.1

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.

[Rust] Release 0.58.1

Fixed

• Crash in Pyo3 validators when an Enum member's value override emptied a list or dict holding the instance being read.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property in Pyo3 validators.

Changelog

Sourced from jsonschema's changelog.

[0.58.1] - 2026-09-26

Fixed

• Crash in Pyo3 validators when an Enum member's value override emptied a list or dict holding the instance being read.

Performance

• uri and uri-reference formats check the syntax directly instead of parsing each value into a URI.
• Enum members read their stored value directly instead of calling the value property in Pyo3 validators.

Commits

• 397cd0a chore(ruby): Release 0.58.1
• ee1fd05 chore(python): Release 0.58.1
• a3033e5 chore(rust): Release 0.58.1
• 108be08 fix(python): Use-after-free when Python code empties the instance mid-walk
• 3051b06 fix(python): Concurrent mutation crash in canonical.json.to_string on free-th...
• 29f6c5f perf: Check uri and uri-reference syntax without building a URI
• 5a17d44 docs: Update changelog
• 76516b2 chore(python): Release 0.58.0
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[rocketmq-rust-bot]

🔊@dependabot[bot] 🚀Thanks for your contribution🎉！

[rocketmq-rust-bot]

LGTM - Required CI checks passed ✅