chore(deps): bump schema-utils from 4.3.3 to 4.5.0

[dependabot]

Bumps schema-utils from 4.3.3 to 4.5.0.

Release notes

Sourced from schema-utils's releases.

v4.5.0

Minor Changes

• The absolutePath keyword reads a file: URL the way Node's own URL parser does: the scheme may be followed by any number of slashes, so file:/directory is accepted alongside file:///directory, and it is matched case-insensitively, so FILE:///directory is too. A scheme with no slash after it — file:directory — still names no absolute path and is rejected. (by @​alexander-akait in #226)

v4.4.0

Minor Changes

• The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @​laymonage, @​alexander-akait in #222)

• process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @​alexander-akait in #217)

• At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @​alexander-akait in #217)

Patch Changes

• read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @​alexander-akait in #225)

• output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @​alexander-akait in #224)

• Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @​alexander-akait in #221)

• A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @​alexander-akait in #223)

• Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @​alexander-akait in #217)

All notable changes to this project will be documented in this file.

4.3.3 (2025-10-02)

Bug Fixes

• reexport ValidationErrorConfiguration type (#204) (49af922)

4.3.2 (2025-04-22)

Bug Fixes

• compatibility with old types (#198) (8e31ef3)

4.3.1 (2025-04-22)

Bug Fixes

• export Schema and additional schemas (#197) (f72cd60)

Changelog

Sourced from schema-utils's changelog.

4.5.0

Minor Changes

• The absolutePath keyword reads a file: URL the way Node's own URL parser does: the scheme may be followed by any number of slashes, so file:/directory is accepted alongside file:///directory, and it is matched case-insensitively, so FILE:///directory is too. A scheme with no slash after it — file:directory — still names no absolute path and is rejected. (by @​alexander-akait in #226)

4.4.0

Minor Changes

• The absolutePath keyword accepts an optional file:// prefix now, so a path from import.meta.resolve() can be passed to an option that takes an absolute path. Options that take a relative path reject such a value instead, they used to accept it. (by @​laymonage, @​alexander-akait in #222)

• process.env.SKIP_VALIDATION is now read when schema-utils is loaded rather than on every validation, so set it before starting the process. enableValidation()/disableValidation() still take effect immediately and now share their state with every copy of schema-utils in the process directly. (by @​alexander-akait in #217)

• At most 100 errors of a list are listed in the message now, the rest is counted as and N more errors. errors still holds every error. (by @​alexander-akait in #217)

Patch Changes

• read the format keyword as part of the type, i.e. should be a date string instead of should be a string (should match format "date") (by @​alexander-akait in #225)

• output the type of object properties in error messages, i.e. object { foo?: boolean, bar?: integer } (by @​alexander-akait in #224)

• Updated ajv to 8.20.0, ajv-formats to 3.0.1 and @types/json-schema to 7.0.15. ajv-formats 3 only moves ajv to a peer dependency, the formats themselves are unchanged. (by @​alexander-akait in #221)

• A string an absolutePath keyword applies to is described as an absolute path string or a relative path string rather than as a bare string, which read as though any string would do. A failure a schema reaches through more than one branch is listed once instead of repeatedly, so a relative path given to a rule condition is reported as the one line that says so. (by @​alexander-akait in #223)

• Fixed error filtering being quadratic in the amount of reported errors, which let a large invalid configuration lock up the process, and stopped errors from being dropped when one instance path merely contained another as a substring - two sibling properties where one name is a prefix of the other were enough to lose an error. An array of options reporting a lot of errors no longer throws RangeError: Maximum call stack size exceeded instead of a ValidationError. (by @​alexander-akait in #217)

All notable changes to this project will be documented in this file.

Commits

• 1cb9c8d chore(release): new release (#227)
• 9578e1a feat: read a file: URL the way Node does in absolutePath (#226)
• b4fd660 chore(release): new release (#220)
• 0f99aa9 feat: read the format keyword as part of the type (#225)
• 4baf113 feat: output the type of object properties in error messages (#224)
• 49bb7ce fix: say which strings an absolutePath keyword accepts (#223)
• 5c21244 feat: allow file:// protocol prefix in absolute paths (#222)
• fc918a9 chore: update dependencies (#221)
• d72a15b chore: release with changesets (#219)
• 1d0404e test: cover collecting a subtree of errors and grouping a nested anyOf (#218)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for schema-utils since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)