build(deps): bump jsonschema from 0.41.0 to 0.42.1

[dependabot]

Bumps jsonschema from 0.41.0 to 0.42.1.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.42.1

Performance

• Reduce dynamic dispatch overhead for non-recursive $ref resolution.
• Cache ECMA regex transformations during format: "regex" validation.

Packaging

• Exclude rust-toolchain.toml from wheels. #1012

[Ruby] Release 0.42.1

Performance

• Reduce dynamic dispatch overhead for non-recursive $ref resolution.
• Cache ECMA regex transformations during format: "regex" validation.

[Rust] Release 0.42.1

Performance

• Reduce dynamic dispatch overhead for non-recursive $ref resolution.
• Cache ECMA regex transformations during format: "regex" validation.

[Python] Release 0.42.0

Fixed

• Panic when validating $ref targets that resolve to boolean schemas.

Performance

• Use FFI PyList_New + PyList_SetItem for array conversion to avoid reallocations.
• Cache ValidationError, ReferencingError, and decimal.Decimal types to avoid repeated module imports.
• Cache formatted schema locations to avoid repeated formatting during evaluate().
• Use as_str instead of to_string for type names in validation errors to avoid allocations.

[Rust] Release 0.42.0

Added

• JsonType::as_str method for zero-allocation type name access.
• ValidationErrorKind::keyword is now public.
• tls-ring feature flag to opt into using ring as the TLS crypto provider instead of the default aws-lc-rs. #997
• CLI: Support YAML (.yaml/.yml) instance files. #988

Changed

• BREAKING: Default TLS crypto provider switched back to aws-lc-rs. Users who need ring can opt in via the tls-ring feature flag. This resolves potential conflicts with other libraries using aws-lc-rs. #997

Fixed

• Panic when validating $ref targets that resolve to boolean schemas.

... (truncated)

Changelog

Sourced from jsonschema's changelog.

[0.42.1] - 2026-02-17

Performance

• Reduce dynamic dispatch overhead for non-recursive $ref resolution.
• Cache ECMA regex transformations during format: "regex" validation.

[0.42.0] - 2026-02-14

Added

• JsonType::as_str method for zero-allocation type name access.
• ValidationErrorKind::keyword is now public.
• tls-ring feature flag to opt into using ring as the TLS crypto provider instead of the default aws-lc-rs. #997
• CLI: Support YAML (.yaml/.yml) instance files in text output mode. #988

Changed

• BREAKING: Default TLS crypto provider switched back to aws-lc-rs. Users who need ring can opt in via the tls-ring feature flag. This resolves potential conflicts with other libraries using aws-lc-rs. #997

Fixed

• Panic when validating $ref targets that resolve to boolean schemas.

Performance

• Cache formatted schema locations with OnceLock to avoid repeated formatting during evaluate().

Commits

• 9ea8fe0 chore(ruby): Release 0.42.1
• 283f8ca chore(python): Release 0.42.1
• b1584ef chore(rust): Release 0.42.1
• cc885c5 chore(python): Exclude rust-toolchain.toml from wheels
• fb48493 perf: Cache ECMA regex transformations during format: "regex" validation
• e385dc9 perf: Metaschema validation benchmarks
• 3a0e590 build(deps): update serde-saphyr requirement from 0.0.18 to 0.0.19
• ab25304 perf: Reduce dynamic dispatch overhead for non-recursive $ref resolution
• 61b2ab4 docs(ruby): Update readme
• 7b78864 build(deps): bump werkzeug from 2.2.3 to 3.1.5 in /crates/jsonschema-py
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)