[dependabot]

Bumps @cfworker/json-schema from 4.1.1 to 4.1.4.

Release notes

Sourced from @​cfworker/json-schema's releases.

@​cfworker/json-schema@​4.1.4

Patch Changes

• 2ec889d: Remove obsolete declaration files that were shadowed by the TypeScript sources.

@​cfworker/json-schema@​4.1.3

Patch Changes

• 4dbbcbc: A declared property (or one matching patternProperties) that fails its own schema is no longer also reported by additionalProperties. Fixes #336.

• 72d2f31: Fix JSON Schema conformance for contains bounds, fractional multipleOf values, prototype-named properties, array/object equality, and dependentRequired schema traversal. Fixes #338.

• 48962e9: Modernize the build and test toolchain for Node.js 26 and TypeScript 7. Packages are now checked with stricter optional-property and indexed-access rules, and library builds produce both ESM and CommonJS output through tshy.

  Refresh runtime dependencies and harden dynamic input handling. This includes migrating Web's safe JSON parsing to @hapi/bourne, adopting cookie 2, rejecting malformed JWT structures and unsupported verification algorithms, storing JWKS keys in prototype-safe maps, rejecting undersized UUID byte arrays, avoiding shared UUID fallback state, and making schema, routing, and session lookups safer.

Commits

• e45acac Version Packages
• f64729e fix(web): preserve repeated validation values
• 2ec889d chore: remove obsolete files and scripts (#349)
• d295094 Configure npm trusted publishing
• 4acb0d8 Version Packages
• 72d2f31 fix(json-schema): resolve conformance failures (#338)
• 64ad18c fix(release): use renamed changesets publish-script input
• 4dbbcbc Don't report declared properties under additionalProperties
• aa38fa5 fix(json-schema): handle negative multipleOf remainders
• f3dd816 fix: harden auth and runtime security
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​cfworker/json-schema since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)