chore(deps): bump the jsonschema group with 2 updates

[dependabot]

Updates the requirements on jsonschema and referencing to permit the latest version.
Updates jsonschema to 0.40.0

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.40.0

Added

• Custom keyword validators via the keywords parameter for extending JSON Schema with domain-specific validation rules.
• HttpOptions for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.

Changelog

Sourced from jsonschema's changelog.

[0.40.0] - 2026-01-18

Added

• HttpOptions and ValidationOptions::with_http_options() for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.
• CLI: --timeout, --connect-timeout, --insecure, and --cacert flags for HTTP configuration.

[0.39.0] - 2026-01-16

Added

• ValidationError::evaluation_path() for the dynamic path including $ref traversals.

Changed

• BREAKING: Simplified custom keyword API - Keyword::validate no longer receives path parameters, and ValidationError::custom only takes a message.

Fixed

• schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

• evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
• Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

[0.38.1] - 2025-12-25

Fixed

• multipleOf validation for integer values between 2^53 and i64::MAX with arbitrary-precision feature.

[0.38.0] - 2025-12-24

Added

• EmailOptions for configuring email format validation. #903

Fixed

• Use-after-free in async $ref resolution when multiple refs target the same external URL with different fragments. #906
• multipleOf validation for large u64 values beyond i64::MAX with arbitrary-precision feature.
• Validator not being Send + Sync on WASM targets. #915

[0.37.4] - 2025-11-30

Fixed

• Stack overflow during validation of schemas with circular $ref chains (e.g., a -> b -> a).
• Local $ref resolution within fragment-extracted external resources. #892

... (truncated)

Commits

• 70d9711 chore(rust): Release 0.40.0
• 24c067d feat(python): Custom keywords
• 9047c64 feat: HTTP configuration
• 8bb9535 docs: Update README
• f2c9b24 docs: Update benchmarks
• 0281258 perf: Remove duplicated benchmarks
• 8c6ab7f chore(python): Release 0.39.0
• 68073a5 chore(rust): Release 0.39.0
• 3f7f457 perf: Cache some validation results
• 03979ce perf: Add benchmarks for recursive schemas
• Additional commits viewable in compare view

Updates referencing to 0.40.0

Release notes

Sourced from referencing's releases.

[Python] Release 0.40.0

Added

• Custom keyword validators via the keywords parameter for extending JSON Schema with domain-specific validation rules.
• HttpOptions for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.

Changelog

Sourced from referencing's changelog.

[0.40.0] - 2026-01-18

Added

• HttpOptions and ValidationOptions::with_http_options() for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.
• CLI: --timeout, --connect-timeout, --insecure, and --cacert flags for HTTP configuration.

[0.39.0] - 2026-01-16

Added

• ValidationError::evaluation_path() for the dynamic path including $ref traversals.

Changed

• BREAKING: Simplified custom keyword API - Keyword::validate no longer receives path parameters, and ValidationError::custom only takes a message.

Fixed

• schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

• evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
• Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

[0.38.1] - 2025-12-25

Fixed

• multipleOf validation for integer values between 2^53 and i64::MAX with arbitrary-precision feature.

[0.38.0] - 2025-12-24

Added

• EmailOptions for configuring email format validation. #903

Fixed

• Use-after-free in async $ref resolution when multiple refs target the same external URL with different fragments. #906
• multipleOf validation for large u64 values beyond i64::MAX with arbitrary-precision feature.
• Validator not being Send + Sync on WASM targets. #915

[0.37.4] - 2025-11-30

Fixed

• Stack overflow during validation of schemas with circular $ref chains (e.g., a -> b -> a).
• Local $ref resolution within fragment-extracted external resources. #892

... (truncated)

Commits

• 70d9711 chore(rust): Release 0.40.0
• 24c067d feat(python): Custom keywords
• 9047c64 feat: HTTP configuration
• 8bb9535 docs: Update README
• f2c9b24 docs: Update benchmarks
• 0281258 perf: Remove duplicated benchmarks
• 8c6ab7f chore(python): Release 0.39.0
• 68073a5 chore(rust): Release 0.39.0
• 3f7f457 perf: Cache some validation results
• 03979ce perf: Add benchmarks for recursive schemas
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions