build(deps): carry one jsonschema stack again (690 → 685 packages)

The dependabot bump of the workspace `jsonschema` pin to 0.49 (d85be3b76)
left schemaui 0.12 — which still requires ^0.46, including its latest
0.12.4 — on the old line, so the graph compiled jsonschema,
jsonschema-regex, referencing, and fancy-regex twice (5.8 s + 3.2 s of
the cold lib-test build for the two jsonschema units alone) and
`cargo deny check bans` warned on all four. Pin the workspace back to the
0.46 line schemaui can share, with a note to move both together, and
drop the stale jni/jni-sys/redox_syscall skips deny reported as unmatched
or unnecessary. `cargo deny check bans` and `check advisories` are clean;
`--locked` still resolves; codewhale-workflow-js and the tui schema tests
pass. multiple-versions stays "warn".

Cargo.lock

@@ -1071,7 +1071,7 @@ dependencies = [
  "htmd",
  "ignore",
  "image",
- "jsonschema 0.49.9",
+ "jsonschema",
  "libc",
  "lru",
  "mimalloc",
@@ -1143,7 +1143,7 @@ name = "codewhale-workflow-js"
 version = "0.9.8"
 dependencies = [
  "async-trait",
- "jsonschema 0.49.9",
+ "jsonschema",
  "rquickjs",
  "serde",
  "serde_json",
@@ -1843,17 +1843,6 @@ dependencies = [
  "regex-syntax",
 ]
 
-[[package]]
-name = "fancy-regex"
-version = "0.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "476de73bddf2ef8490aa4ee8f1cf40b430bf1d56c48c22080e5186952cd580e6"
-dependencies = [
- "bit-set 0.8.0",
- "regex-automata",
- "regex-syntax",
-]
-
 [[package]]
 name = "fastrand"
 version = "2.5.0"
@@ -2838,11 +2827,11 @@ dependencies = [
  "getrandom 0.3.4",
  "idna",
  "itoa",
- "jsonschema-regex 0.46.10",
+ "jsonschema-regex",
  "num-cmp",
  "num-traits",
  "percent-encoding",
- "referencing 0.46.10",
+ "referencing",
  "regex",
  "serde",
  "serde_json",
@@ -2850,35 +2839,6 @@ dependencies = [
  "uuid-simd",
 ]
 
-[[package]]
-name = "jsonschema"
-version = "0.49.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ec8a241beed129f06114aa68007e905ca350e7baeb6e17a7631bb7978d91b2"
-dependencies = [
- "ahash",
- "bytecount",
- "data-encoding",
- "email_address",
- "fancy-regex 0.19.0",
- "fraction",
- "getrandom 0.3.4",
- "idna",
- "itoa",
- "jsonschema-regex 0.49.9",
- "jsonschema-value",
- "num-cmp",
- "num-traits",
- "percent-encoding",
- "referencing 0.49.9",
- "regex",
- "serde",
- "serde_json",
- "strum 0.28.0",
- "unicode-general-category",
- "uuid-simd",
-]
-
 [[package]]
 name = "jsonschema-regex"
 version = "0.46.10"
@@ -2888,29 +2848,6 @@ dependencies = [
  "regex-syntax",
 ]
 
-[[package]]
-name = "jsonschema-regex"
-version = "0.49.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "91994f45017ed5e66aa8e59b8415f4cb033a6380d7200387b7cf117595fbdf85"
-dependencies = [
- "regex-syntax",
-]
-
-[[package]]
-name = "jsonschema-value"
-version = "0.49.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ec7637f83e510868ae6ed625f7ebfbbde4554ee8ce49854caa5126a8b9b9ecb"
-dependencies = [
- "ahash",
- "bytecount",
- "fraction",
- "num-cmp",
- "num-traits",
- "serde_json",
-]
-
 [[package]]
 name = "kasuari"
 version = "0.4.12"
@@ -4301,23 +4238,6 @@ dependencies = [
  "serde_json",
 ]
 
-[[package]]
-name = "referencing"
-version = "0.49.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6efa2154ea6f5ce0fdecdd2a8d18f2fa1a39a8fbba91564f555a592e4dce8278"
-dependencies = [
- "ahash",
- "fluent-uri",
- "getrandom 0.3.4",
- "hashbrown 0.17.1",
- "itoa",
- "micromap",
- "parking_lot",
- "percent-encoding",
- "serde_json",
-]
-
 [[package]]
 name = "regex"
 version = "1.13.1"
@@ -4809,7 +4729,7 @@ dependencies = [
  "crossterm",
  "include_dir",
  "indexmap",
- "jsonschema 0.46.10",
+ "jsonschema",
  "percent-encoding",
  "ratatui",
  "regex",

Cargo.toml

@@ -45,7 +45,10 @@ clap = { version = "4.5.54", features = ["derive"] }
 clap_complete = "4.5"
 dirs = "6.0.0"
 encoding_rs = "0.8.35"
-jsonschema = { version = "0.49", default-features = false }
+# Pinned to the jsonschema line schemaui 0.12 requires (^0.46) so the graph
+# carries one jsonschema/jsonschema-regex/referencing/fancy-regex stack.
+# Move both together when schemaui catches up (dependabot: keep in step).
+jsonschema = { version = "0.46", default-features = false }
 reqwest = { version = "0.13.1", default-features = false, features = ["json", "rustls-no-provider", "socks"] }
 # NOT "parallel": the Workflow VM stays single-threaded and bridges to the
 # multi-thread engine over channels (see crates/workflow-js).

deny.toml

@@ -50,9 +50,6 @@ skip = [
     { name = "core-foundation", version = "0.9.4" },
     { name = "fancy-regex", version = "0.16.2" },
     { name = "itertools", version = "0.13.0" },
-    { name = "jni", version = "0.21.1" },
-    { name = "jni-sys", version = "0.3.0" },
-    { name = "redox_syscall", version = "0.5.18" },
     { name = "security-framework", version = "2.11.1" },
     { name = "strum", version = "0.28.0" },
     { name = "strum_macros", version = "0.28.0" },