chore(deps): update dependency jsonschema to v4.18.3 - autoclosed
Metadata
Current evaluation
Autoclosed unmerged after a hold for Rust-dependency snap checks; a later jsonschema bump to v4.19.0 merged in #1255 (commit 0f02e156), superseding this PR.
Resolution: closed superseded
Reason: Renovate's update was held pending snap validation and then marked autoclosed without merging. Later, PR #1255 merged as commit 0f02e156 and advanced jsonschema beyond this proposed version.
Evaluated by: mr-cal-bot
No scores available.
Issue body
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [jsonschema](https://togithub.com/python-jsonschema/jsonschema) ([changelog](https://togithub.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)) | `==4.17.3` -> `==4.18.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
---
### Release Notes
<details>
<summary>python-jsonschema/jsonschema (jsonschema)</summary>
### [`v4.18.3`](https://togithub.com/python-jsonschema/jsonschema/blob/HEAD/CHANGELOG.rst#v4183)
[Compare Source](https://togithub.com/python-jsonschema/jsonschema/compare/v4.18.2...v4.18.3)
\=======
- Properly preserve `applicable_validators` in extended validators.
Specifically, validators extending early drafts where siblings of `$ref` were ignored will properly ignore siblings in the extended validator.
### [`v4.18.2`](https://togithub.com/python-jsonschema/jsonschema/blob/HEAD/CHANGELOG.rst#v4182)
[Compare Source](https://togithub.com/python-jsonschema/jsonschema/compare/v4.18.1...v4.18.2)
\=======
- Fix an additional regression with the deprecated `jsonschema.RefResolver` and pointer resolution.
### [`v4.18.1`](https://togithub.com/python-jsonschema/jsonschema/blob/HEAD/CHANGELOG.rst#v4181)
[Compare Source](https://togithub.com/python-jsonschema/jsonschema/compare/v4.18.0...v4.18.1)
\=======
- Fix a regression with `jsonschema.RefResolver` based resolution when used in combination with a custom validation dialect (via `jsonschema.validators.create`).
### [`v4.18.0`](https://togithub.com/python-jsonschema/jsonschema/blob/HEAD/CHANGELOG.rst#v4180)
[Compare Source](https://togithub.com/python-jsonschema/jsonschema/compare/v4.17.3...v4.18.0)
\=======
This release majorly rehauls the way in which JSON Schema reference resolution is configured.
It does so in a way that *should* be backwards compatible, preserving old behavior whilst emitting deprecation warnings.
- `jsonschema.RefResolver` is now deprecated in favor of the new `referencing library <https://github.com/python-jsonschema/referencing/>`\_.
`referencing` will begin in beta, but already is more compliant than the existing `$ref` support.
This change is a culmination of a meaningful chunk of work to make `$ref` resolution more flexible and more correct.
Backwards compatibility *should* be preserved for existing code which uses `RefResolver`, though doing so is again now deprecated, and all such use cases should be doable using the new APIs.
Please file issues on the `referencing` tracker if there is functionality missing from it, or here on the `jsonschema` issue tracker if you have issues with existing code not functioning the same, or with figuring out how to change it to use `referencing`.
In particular, this referencing change includes a change concerning *automatic* retrieval of remote references (retrieving `http://foo/bar` automatically within a schema).
This behavior has always been a potential security risk and counter to the recommendations of the JSON Schema specifications; it has survived this long essentially only for backwards compatibility reasons, and now explicitly produces warnings.
The `referencing` library itself will *not* automatically retrieve references if you interact directly with it, so the deprecated behavior is only triggered if you fully rely on the default `$ref` resolution behavior and also include remote references in your schema, which will still be retrieved during the deprecation period (after which they will become an error).
- Support for Python 3.7 has been dropped, as it is nearing end-of-life.
This should not be a "visible" change in the sense that `requires-python` has been updated, so users using 3.7 should still receive `v4.17.3` when installing the library.
- On draft 2019-09, `unevaluatedItems` now properly does *not* consider items to be evaluated by an `additionalItems` schema if `items` is missing from the schema, as the specification says in this case that `additionalItems` must be completely ignored.
- Fix the `date` format checker on Python 3.11 (when format assertion behavior is enabled), where it was too liberal ([#​1076](https://togithub.com/python-jsonschema/jsonschema/issues/1076)).
- Speed up validation of `unevaluatedProperties` ([#​1075](https://togithub.com/python-jsonschema/jsonschema/issues/1075)).
## Deprecations
- `jsonschema.RefResolver` -- see above for details on the replacement
- `jsonschema.RefResolutionError` -- see above for details on the replacement
- relying on automatic resolution of remote references -- see above for details on the replacement
- importing `jsonschema.ErrorTree` -- instead import it via `jsonschema.exceptions.ErrorTree`
- importing `jsonschema.FormatError` -- instead import it via `jsonschema.exceptions.FormatError`
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "every weekend" in timezone Etc/UTC, Automerge - "before 07:00" in timezone Etc/UTC.
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/canonical/charmcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi44LjExIiwidXBkYXRlZEluVmVyIjoiMzYuOC4xMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed superseded | Autoclosed unmerged after a hold for Rust-dependency snap checks; a later jsonschema bump to v4.19.0 merged in #1255 (commit 0f02e156), superseding this PR. | |
| stealth/space-bunny-alpha | — | closed stale | jsonschema 4.18.3 was not merged: #1167 was held for snap verification of new Rust dependencies, then autoclosed after inactivity. A later upgrade to 4.19.0 landed via #1255 (0f02e156). | |
| qwen/qwen3.6-35b-a3b | — | — | Dependency update for jsonschema to v4.18.3 was held pending snap file verification for new rust dependencies. The pull request was automatically closed due to inactivity without being merged. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Dependency update for jsonschema to v4.18.3 was held for snap file verification due to new rust dependencies and subsequently autoclosed without merging. |
Update history
No update history recorded yet.
Related work
-
Superseded By:
canonical/charmcraft#1255
(confidence 96%)
Merged later as commit 0f02e156, updating jsonschema from 4.18.4 to 4.19.0.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1255 chore(deps): update dependency jsonschema to v4.19.0 | charmcraft | merged | Renovate bot bumped jsonschema from 4.18.4 to 4.19.0 (+2/-2 in requirements files); approved by 2 reviewers and merged as commit 0f02e156 (PR #1255). | |
| #1187 chore(deps): update dependency jsonschema-specifications to v2023.7.1 | charmcraft | merged | Renovate PR merged as commit 65927682, bumping pinned jsonschema-specifications from ==2023.6.1 to ==2023.7.1 in pyproject.toml; the dependency was later dropped entirely. | |
| #1174 chore(deps): update dependency pytest-cov to v4.1.0 - autoclosed | charmcraft | closed | Renovate PR #1174 was auto-closed unmerged after the pytest-cov 4.0.0→4.1.0 bump landed via #1148 (a4b33f17); it later advanced to v5 in #1618. | |
| #1603 chore(deps): update dependency typing_extensions to v4.10.0 - autoclosed | charmcraft | closed | PR #1603 was autoclosed unmerged; PR #1637 superseded it by updating typing_extensions from 4.9.0 to 4.11.0 and merged as commit cb0292b4. | |
| #1170 chore(deps): update dependency humanize to v4.7.0 - autoclosed | charmcraft | closed | Autoclosed unmerged; the humanize 4.7.0 update was superseded by merged PR #1251, which updated the dependency to 4.8.0 in commit 3b693244. | |
| #5702 build(deps): update dependency jsonschema to v4 (main) | snapcraft | closed | Renovate's jsonschema 2.6.0->4.25.0 bump was closed unmerged by mr-cal on 2025-08-14 in favour of issues #5653/#5655, which replace jsonschema with Pydantic. jsonschema 2.6.0 remains pinned. | |
| #252 chore(deps): update dependency lint/ruff to ~=0.4.1 - autoclosed | craft-cli | closed | Renovate PR bumping lint/ruff to ~=0.4.1 was autoclosed unmerged: the ruff dependency had already been dropped in favour of the ruff snap by PR #250 (commit 35b6ab3), making the version bump obsolete. | |
| #5506 build(deps): update dependency jsonschema (main) | snapcraft | closed | Closed unmerged in favor of jsonschema-removal work #5653/#5655; the 2.6.0 bump was later merged through #5690 (commit f12ce847d). | |
| #1168 chore(deps): update dependency typing_extensions to v4.7.1 - autoclosed | charmcraft | closed | Renovate autoclosed unmerged PR #1168; its typing_extensions 4.7.1 update was abandoned. Later PR #1276 merged as 436a0f3b, advancing the dependency to 4.8.0. | |
| #4483 chore(deps): update documentation dependencies | snapcraft | closed | Renovate docs-dependency PR closed unmerged with no reviews or CI; the same updates landed later via snapcore/snapcraft#4728 (commit 477918081). |