chore(deps): bump jsonschema from 0.38.1 to 0.40.0 in /implementations/rust-jsonschema

[dependabot]

Bumps jsonschema from 0.38.1 to 0.40.0.

Release notes

Sourced from jsonschema's releases.

[Python] Release 0.40.0

Added

• Custom keyword validators via the keywords parameter for extending JSON Schema with domain-specific validation rules.
• HttpOptions for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.

[Rust] Release 0.40.0

Added

• HttpOptions and ValidationOptions::with_http_options() for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.
• CLI: --timeout, --connect-timeout, --insecure, and --cacert flags for HTTP configuration.

[Python] Release 0.39.0

Added

• ValidationError.evaluation_path attribute for the dynamic path including $ref traversals.

Fixed

• schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

• evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
• Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

[Rust] Release 0.39.0

Added

• ValidationError::evaluation_path() for the dynamic path including $ref traversals.

Changed

• BREAKING: Simplified custom keyword API - Keyword::validate no longer receives path parameters, and ValidationError::custom only takes a message.

Fixed

• schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

• evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
• Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

Changelog

Sourced from jsonschema's changelog.

[0.40.0] - 2026-01-18

Added

• HttpOptions and ValidationOptions::with_http_options() for configuring HTTP client behavior (timeouts, TLS verification, custom CA certificates) when fetching external schemas.
• CLI: --timeout, --connect-timeout, --insecure, and --cacert flags for HTTP configuration.

[0.39.0] - 2026-01-16

Added

• ValidationError::evaluation_path() for the dynamic path including $ref traversals.

Changed

• BREAKING: Simplified custom keyword API - Keyword::validate no longer receives path parameters, and ValidationError::custom only takes a message.

Fixed

• schemaLocation in evaluation output now excludes $ref/$dynamicRef/$recursiveRef per JSON Schema spec.

Performance

• evaluate(): 4.5-30x faster on complex schemas, 12-89% faster overall.
• Recursive schemas with oneOf/anyOf: ~4000x faster via memoization. #930

Commits

• 70d9711 chore(rust): Release 0.40.0
• 24c067d feat(python): Custom keywords
• 9047c64 feat: HTTP configuration
• 8bb9535 docs: Update README
• f2c9b24 docs: Update benchmarks
• 0281258 perf: Remove duplicated benchmarks
• 8c6ab7f chore(python): Release 0.39.0
• 68073a5 chore(rust): Release 0.39.0
• 3f7f457 perf: Cache some validation results
• 03979ce perf: Add benchmarks for recursive schemas
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)