Skip to content

Bump @sourcemeta/jsonschema from 15.9.0 to 16.0.0 in /vscode#201

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode/sourcemeta/jsonschema-16.0.0
Open

Bump @sourcemeta/jsonschema from 15.9.0 to 16.0.0 in /vscode#201
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/vscode/sourcemeta/jsonschema-16.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps @sourcemeta/jsonschema from 15.9.0 to 16.0.0.

Release notes

Sourced from @​sourcemeta/jsonschema's releases.

v16.0.0

What's Changed

Breaking Changes

Before this release, the Linux pre-compiled binaries were built against a vendored static copy of cURL. While that worked in most cases, it relied on a very specific CA certificate store. Making it problematic if you need more runtime control over that in your actual target installation.

So instead of linking against a specific version of cURL in the system (and therefore probably breaking some distros no matter what), we take a more dynamic approach: we can at runtime try to find an appropriate cURL library we can use (probing lots of popular paths across distros), and dynamically load it.

Most Linux systems have cURL installed out of the box, otherwise you get a friendly runtime error instructing you on how to fix it or point to a custom one of your choice.

Full Changelog: sourcemeta/jsonschema@v15.11.0...v16.0.0

v15.11.0

What's Changed

  • Make use of NSURLSession and WinHTTP on macOS and Windows by @​jviotti in sourcemeta/jsonschema#778
    • This is critical for users behind enterprise controlled environments, as native networking stacks are the only one that properly integrate with these things.

Full Changelog: sourcemeta/jsonschema@v15.10.1...v15.11.0

v15.10.1

What's Changed

Full Changelog: sourcemeta/jsonschema@v15.10.0...v15.10.1

v15.10.0

What's Changed

Full Changelog: sourcemeta/jsonschema@v15.9.0...v15.10.0

Commits
  • b52f6df v16.0.0
  • dda4f72 Use system libcurl through dlopen on Linux/BSD (#781)
  • fc125d6 Support dependentSchemas and dependentRequired on codegen (#780)
  • f94a8eb Support bundled schemas with custom meta-schemas (#779)
  • 73235b7 v15.11.0
  • 6648199 Make use of NSURLSession and WinHTTP on macOS and Windows (#778)
  • 0fdc267 Upgrade all Sourcemeta dependencies (#777)
  • e8e8968 Bring Going Further README section right below Usage
  • 20de62b v15.10.1
  • 71ff30d Fix crash on --default-dialect relative path without $id (#776)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Review in cubic

Bumps [@sourcemeta/jsonschema](https://github.com/sourcemeta/jsonschema) from 15.9.0 to 16.0.0.
- [Release notes](https://github.com/sourcemeta/jsonschema/releases)
- [Commits](sourcemeta/jsonschema@v15.9.0...v16.0.0)

---
updated-dependencies:
- dependency-name: "@sourcemeta/jsonschema"
  dependency-version: 16.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 22, 2026
@augmentcode

augmentcode Bot commented Jun 22, 2026

Copy link
Copy Markdown
🤖 Augment PR Summary

Summary: Updates the VSCode package dependency @sourcemeta/jsonschema from 15.9.0 to 16.0.0.


Why: Pulls in upstream v16 features (bundled schemas with custom meta-schemas and additional codegen keywords) and aligns with the latest release, which includes a Linux/BSD networking binary change (system libcurl loading).

🤖 Was this summary useful? React with 👍 or 👎

@augmentcode augmentcode Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review completed. 1 suggestion posted.

Fix All in Augment

Comment augment review to trigger a new review at any time.

Comment thread vscode/package.json
"qna": "marketplace",
"dependencies": {
"@sourcemeta/jsonschema": "^15.9.0"
"@sourcemeta/jsonschema": "^16.0.0"

@augmentcode augmentcode Bot Jun 22, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sourcemeta/jsonschema v16.0.0 switches Linux/BSD binaries to dynamically loading system libcurl via dlopen; can you confirm the VSCode extension’s target environments (incl. remote/containers) reliably provide libcurl or that the extension surfaces a clear error/doc if it’s missing? Otherwise this upgrade could introduce runtime failures that won’t show up until users run the extension on minimal images.

Severity: medium

Fix This in Augment

🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants