Update vendored schemas

CHANGELOG.rst

@@ -10,7 +10,8 @@ Unreleased
 
 .. vendor-insert-here
 
-- Update vendored schemas: compose-spec, meltano, renovate (2025-07-06)
+- Update vendored schemas: compose-spec, dependabot, gitlab-ci, meltano, mergify,
+  renovate (2025-07-20)
 
 0.33.2
 ------

src/check_jsonschema/builtin_schemas/vendor/dependabot.json

@@ -698,6 +698,7 @@
     },
     "update": {
       "type": "object",
+      "additionalProperties": false,
       "properties": {
         "allow": {
           "description": "Customize which updates are allowed",
@@ -1026,6 +1027,7 @@
             "type": {
               "description": "Identifies the type of registry.",
               "enum": [
+                "cargo-registry",
                 "composer-repository",
                 "docker-registry",
                 "git",
@@ -1034,6 +1036,7 @@
                 "maven-repository",
                 "npm-registry",
                 "nuget-feed",
+                "pub-repository",
                 "python-index",
                 "rubygems-server",
                 "terraform-registry"

src/check_jsonschema/builtin_schemas/vendor/gitlab-ci.json

@@ -752,7 +752,10 @@
               "additionalProperties": false,
               "properties": {
                 "user": {
-                  "type": ["string", "integer"],
+                  "type": [
+                    "string",
+                    "integer"
+                  ],
                   "minLength": 1,
                   "maxLength": 255,
                   "description": "Username or UID to use for the container. It also supports the UID:GID format."
@@ -846,7 +849,10 @@
                 "additionalProperties": false,
                 "properties": {
                   "user": {
-                    "type": ["string", "integer"],
+                    "type": [
+                      "string",
+                      "integer"
+                    ],
                     "minLength": 1,
                     "maxLength": 255,
                     "description": "Username or UID to use for the container. It also supports the UID:GID format."
@@ -1028,6 +1034,52 @@
               ],
               "additionalProperties": false
             },
+            "aws_secrets_manager": {
+              "oneOf": [
+                {
+                  "type": "string",
+                  "description": "The ARN or name of the secret to retrieve. To retrieve a secret from another account, you must use an ARN."
+                },
+                {
+                  "type": "object",
+                  "markdownDescription": "Defines the secret to be fetched from AWS Secrets Manager. The secret_id refers to the ARN or name of the secret in AWS Secrets Manager. Version_id and version_stage are optional parameters that can be used to specify a specific version of the secret, else AWSCURRENT version will be returned.",
+                  "properties": {
+                    "secret_id": {
+                      "type": "string",
+                      "description": "The ARN or name of the secret to retrieve. To retrieve a secret from another account, you must use an ARN."
+                    },
+                    "version_id": {
+                      "type": "string",
+                      "description": "The unique identifier of the version of the secret to retrieve. If you include both this parameter and VersionStage, the two parameters must refer to the same secret version. If you don't specify either a VersionStage or VersionId, Secrets Manager returns the AWSCURRENT version."
+                    },
+                    "version_stage": {
+                      "type": "string",
+                      "description": "The staging label of the version of the secret to retrieve. If you include both this parameter and VersionStage, the two parameters must refer to the same secret version. If you don't specify either a VersionStage or VersionId, Secrets Manager returns the AWSCURRENT version."
+                    },
+                    "region": {
+                      "type": "string",
+                      "description": "The AWS region where the secret is stored. Use this to override the region for a specific secret. Defaults to AWS_REGION variable."
+                    },
+                    "role_arn": {
+                      "type": "string",
+                      "description": "The ARN of the IAM role to assume before retrieving the secret. Use this to override the ARN. Defaults to AWS_ROLE_ARN variable."
+                    },
+                    "role_session_name": {
+                      "type": "string",
+                      "description": "The name of the session to use when assuming the role. Use this to override the session name. Defaults to AWS_ROLE_SESSION_NAME variable."
+                    },
+                    "field": {
+                      "type": "string",
+                      "description": "The name of the field to retrieve from the secret. If not specified, the entire secret is retrieved."
+                    }
+                  },
+                  "required": [
+                    "secret_id"
+                  ],
+                  "additionalProperties": false
+                }
+              ]
+            },
             "akeyless": {
               "type": "object",
               "properties": {
@@ -1075,6 +1127,11 @@
                 "gcp_secret_manager"
               ]
             },
+            {
+              "required": [
+                "aws_secrets_manager"
+              ]
+            },
             {
               "required": [
                 "akeyless"
@@ -2411,10 +2468,11 @@
                   "type": "string"
                 },
                 "strategy": {
-                  "description": "You can mirror the pipeline status from the triggered pipeline to the source bridge job by using strategy: depend",
+                  "description": "You can mirror or depend on the pipeline status from the triggered pipeline to the source bridge job by using strategy: `depend` or `mirror`",
                   "type": "string",
                   "enum": [
-                    "depend"
+                    "depend",
+                    "mirror"
                   ]
                 },
                 "inputs": {
@@ -2595,10 +2653,11 @@
                   ]
                 },
                 "strategy": {
-                  "description": "You can mirror the pipeline status from the triggered pipeline to the source bridge job by using strategy: depend",
+                  "description": "You can mirror or depend on the pipeline status from the triggered pipeline to the source bridge job by using strategy: `depend` or `mirror`",
                   "type": "string",
                   "enum": [
-                    "depend"
+                    "depend",
+                    "mirror"
                   ]
                 },
                 "forward": {

src/check_jsonschema/builtin_schemas/vendor/meltano.json

@@ -815,6 +815,7 @@
                 "file",
                 "email",
                 "integer",
+                "decimal",
                 "options",
                 "object",
                 "array",

src/check_jsonschema/builtin_schemas/vendor/mergify.json

@@ -1296,6 +1296,12 @@
           ],
           "title": "Reporting Method",
           "type": "string"
+        },
+        "post_comment": {
+          "default": true,
+          "description": "Whether to post merge protection status comments on pull requests",
+          "title": "Post Comment",
+          "type": "boolean"
         }
       },
       "title": "MergeProtectionsModel",
@@ -1306,7 +1312,7 @@
       "properties": {
         "max_parallel_checks": {
           "default": 5,
-          "description": "The maximum number of speculative checks allowed to run at the same time.",
+          "description": "The maximum number of speculative checks allowed to run at the same time. Setting this value to 1 disables speculative checks.",
           "maximum": 128,
           "minimum": 1,
           "title": "Max Parallel Checks",
@@ -2354,19 +2360,6 @@
           "title": "Branch Protection Injection Mode",
           "type": "string"
         },
-        "speculative_checks": {
-          "configuration_deprecated_attribute": {
-            "deprecated_summary_ghes_mode": "\n:bangbang: **Action Required** :bangbang:\n> **The configuration uses the deprecated `speculative_checks` attribute in the `queue_rules` section. It has been replaced in favor of `max_parallel_checks` in the `merge_queue` section of the configuration.\n> For more information: https://docs.mergify.com/merge-queue/speculative-checks/",
-            "deprecated_summary_saas_mode": "\n:bangbang: **Action Required** :bangbang:\n> **The configuration uses the deprecated `speculative_checks` attribute in the `queue_rules` section. It has been replaced in favor of `max_parallel_checks` in the `merge_queue` section of the configuration.\n> For more information: https://docs.mergify.com/merge-queue/speculative-checks/"
-          },
-          "default": 1,
-          "deprecated": true,
-          "description": "The maximum number of checks to run in parallel in the queue. Must be between 1 and 128.",
-          "maximum": 128,
-          "minimum": 1,
-          "title": "Speculative Checks",
-          "type": "integer"
-        },
         "batch_size": {
           "default": 1,
           "description": "The maximum number of pull requests per speculative check in the queue. Must be between 1 and 128.",
@@ -2384,7 +2377,7 @@
         },
         "allow_inplace_checks": {
           "default": true,
-          "description": "Allow to update or rebase the original pull request to check its mergeability when first in the queue and not part of a batch or speculative check.",
+          "description": "Allow to update or rebase the original pull request to check its mergeability when first in the queue and not part of a batch (see: `batch_size`) or speculative check (see: `max_parallel_checks`).",
           "title": "Allow Inplace Checks",
           "type": "boolean"
         },
@@ -2578,19 +2571,6 @@
           "title": "Branch Protection Injection Mode",
           "type": "string"
         },
-        "speculative_checks": {
-          "configuration_deprecated_attribute": {
-            "deprecated_summary_ghes_mode": "\n:bangbang: **Action Required** :bangbang:\n> **The configuration uses the deprecated `speculative_checks` attribute in the `queue_rules` section. It has been replaced in favor of `max_parallel_checks` in the `merge_queue` section of the configuration.\n> For more information: https://docs.mergify.com/merge-queue/speculative-checks/",
-            "deprecated_summary_saas_mode": "\n:bangbang: **Action Required** :bangbang:\n> **The configuration uses the deprecated `speculative_checks` attribute in the `queue_rules` section. It has been replaced in favor of `max_parallel_checks` in the `merge_queue` section of the configuration.\n> For more information: https://docs.mergify.com/merge-queue/speculative-checks/"
-          },
-          "default": 1,
-          "deprecated": true,
-          "description": "The maximum number of checks to run in parallel in the queue. Must be between 1 and 128.",
-          "maximum": 128,
-          "minimum": 1,
-          "title": "Speculative Checks",
-          "type": "integer"
-        },
         "batch_size": {
           "default": 1,
           "description": "The maximum number of pull requests per speculative check in the queue. Must be between 1 and 128.",
@@ -2608,7 +2588,7 @@
         },
         "allow_inplace_checks": {
           "default": true,
-          "description": "Allow to update or rebase the original pull request to check its mergeability when first in the queue and not part of a batch or speculative check.",
+          "description": "Allow to update or rebase the original pull request to check its mergeability when first in the queue and not part of a batch (see: `batch_size`) or speculative check (see: `max_parallel_checks`).",
           "title": "Allow Inplace Checks",
           "type": "boolean"
         },
@@ -2797,7 +2777,7 @@
             }
           ],
           "default": null,
-          "description": "To rebase, Mergify needs to impersonate a GitHub user. You can specify the account to use with this option. If no `bot_account` is set, Mergify picks the pull request author. The user account must have already been logged in Mergify dashboard once.",
+          "description": "To rebase, Mergify needs to impersonate a GitHub user. You can specify the account to use with this option. If no `bot_account` is set, Mergify picks the pull request author. The user account must have already been logged in Mergify dashboard once.\n\n**Warning:** Due to security on GitHub side, rebase cannot be performed on pull requests created by bot accounts without explicitly setting the `bot_account` impersonation option.",
           "title": "Bot Account"
         },
         "autosquash": {

src/check_jsonschema/builtin_schemas/vendor/renovate.json

@@ -509,7 +509,7 @@
       "type": "integer",
       "default": 0
     },
-    "baseBranches": {
+    "baseBranchPatterns": {
       "description": "List of one or more custom base branches defined as exact strings and/or via regex expressions.",
       "type": "array",
       "items": {
@@ -6778,7 +6778,7 @@
       "description": "Table column definitions to use in PR tables.",
       "type": "object",
       "default": {
-        "Package": "{{{depNameLinked}}}",
+        "Package": "{{{depNameLinked}}}{{#if newName}}{{#unless (equals depName newName)}} → {{{newNameLinked}}}{{/unless}}{{/if}}",
         "Type": "{{{depType}}}",
         "Update": "{{{updateType}}}",
         "Current value": "{{{currentValue}}}",
@@ -8456,6 +8456,15 @@
       "description": "Username for authentication.",
       "type": "string"
     },
+    "variables": {
+      "description": "Object which holds variable name/value pairs.",
+      "type": "object",
+      "default": {},
+      "additionalProperties": {
+        "type": "string"
+      },
+      "$ref": "#"
+    },
     "velaci": {
       "description": "Configuration object for the velaci manager",
       "type": "object",
@@ -8663,6 +8672,11 @@
                   }
                 ]
               },
+              "enabled": {
+                "description": "Enable or disable corresponding functionality.",
+                "type": "boolean",
+                "default": true
+              },
               "vulnerabilityFixStrategy": {
                 "description": "Strategy to use when fixing vulnerabilities. `lowest` will propose the earliest version with a fix, `highest` will always pick the latest version.",
                 "type": "string",

src/check_jsonschema/builtin_schemas/vendor/sha256/dependabot.sha256

@@ -1 +1 @@
-6c5b8ebc737752ee140da9083e95ebb09c0e3d31d0398d8d301930adb64ea705
+6b4230e1b15ccc441d423fa22f7a8b7234dce0392ea04dd0f30b1894b5d22876

src/check_jsonschema/builtin_schemas/vendor/sha256/gitlab-ci.sha256

@@ -1 +1 @@
-10e9a42e805b622c5e73997396757ea6a444a0aeb4c1e16a02fbb69d880ab387
+a3bccdbd1d0d27b6069042004c0ebf23b2d2f4d4c4f9623a9fdc08262970b9ed

src/check_jsonschema/builtin_schemas/vendor/sha256/meltano.sha256

@@ -1 +1 @@
-0a92bd465b669b8efc0dd7880bce82831db89df04c593fa9eed12453c6c6f283
+1533427925729f2da89f0525c5a579c37932c2ccf2f3b9be6f8ecfed6adba33f

src/check_jsonschema/builtin_schemas/vendor/sha256/mergify.sha256

@@ -1 +1 @@
-bbcf88a9253516a49e9f766370e85d6caccfbe6c7ef35a1b17c9ff4fd12cff7a
+0062d7c6c5d5537052a426f348e214ded9bfc46e319d7b5301b8fd40671841d8

src/check_jsonschema/builtin_schemas/vendor/sha256/renovate.sha256

@@ -1 +1 @@
-11988fc6297c4f2fc752cf87e311f4b8baf23ed5d38288332eb8e2c6af14f010
+6113fff0ea8902b9a90fa0baee631878792fe7c039af1d8cfcf2bf03614842c8