composer: bump justinrainbow/json-schema from 6.10.0 to 6.13.0

[dependabot]

Bumps justinrainbow/json-schema from 6.10.0 to 6.13.0.

Release notes

Sourced from justinrainbow/json-schema's releases.

6.13.0

Fixed

• fix: Reject percent signs that do not introduce a hex triplet in relative references (#959)
• Validate iri and iri-reference formats according to RFC 3987 (#962)
• Fix uri-template rejecting non-Latin literals on PCRE2 10.46 (#961)
• Validate uri-template format according to RFC 6570 (#960)
• fix: Address warning on PHPUnit process due to upstream changes (#956)
• Resolve nested schema ids against their enclosing base uri (#947)

Added

• Validate idn-email format (#963)

6.12.0

Fixed

• Report additional property errors at the property path (#942)
• Fix RFC 3339 date-time validation with high-precision fractional seconds (#940)

Added

• Define minimal permissions on every workflow (#941)
• feat: Add --allow-invalid-content-type-endpoint option to validate-json (#932)

Changed

• fix: Avoid restricted stargazers endpoint in Welcome workflow and avoid running for bot user types (#946)
• fix: Correct changelog and changelog updates (#945)

6.11.0

Fixed

• fix: Handle null byte when validating date/time formats (#939)
• fix: Correct php-cs-fixer setup (#938)
• fix: Ignore Content-Type header parameters when checking media type (#934)
• fix: Dont use mb_detect_encoding for mb_string function calls (#924)
• Add missing ext-filter dependency (#922)

Changed

• Update README with Draft 7 badge correction and include JetBrains logo (#921)

Added

• Update composer.json authors to reflect current active maintainer (#928)

Changelog

Sourced from justinrainbow/json-schema's changelog.

[6.13.0] - 2026-09-23

Fixed

• fix: Reject percent signs that do not introduce a hex triplet in relative references (#959)
• Validate iri and iri-reference formats according to RFC 3987 (#962)
• Fix uri-template rejecting non-Latin literals on PCRE2 10.46 (#961)
• Validate uri-template format according to RFC 6570 (#960)
• fix: Address warning on PHPUnit process due to upstream changes (#956)
• Resolve nested schema ids against their enclosing base uri (#947)

Added

• Validate idn-email format (#963)

[6.12.0] - 2026-09-04

Fixed

• Report additional property errors at the property path (#942)
• Fix RFC 3339 date-time validation with high-precision fractional seconds (#940)

Added

• Define minimal permissions on every workflow (#941)
• feat: Add --allow-invalid-content-type-endpoint option to validate-json (#932)

Changed

• fix: Avoid restricted stargazers endpoint in Welcome workflow and avoid running for bot user types (#946)
• fix: Correct changelog and changelog updates (#945)

[6.11.0] - 2026-08-21

Fixed

• fix: Handle null byte when validating date/time formats (#939)
• fix: Correct php-cs-fixer setup (#938)
• fix: Ignore Content-Type header parameters when checking media type (#934)
• fix: Dont use mb_detect_encoding for mb_string function calls (#924)
• Add missing ext-filter dependency (#922)

Changed

• Update README with Draft 7 badge correction and include JetBrains logo (#921)

Added

• Update composer.json authors to reflect current active maintainer (#928)

Commits

• 30de5e9 docs: Prepare release 6.13.0
• a8ffde7 docs: Update CHANGELOG.md for PR #963
• f7203d5 Validate idn-email format (#963)
• a5c7df8 docs: Update CHANGELOG.md for PR #959
• f6aafbe fix: Reject percent signs that do not introduce a hex triplet in relative ref...
• 003d453 docs: Update CHANGELOG.md for PR #962
• 1857270 Validate iri and iri-reference formats according to RFC 3987 (#962)
• 41f1ade docs: Update CHANGELOG.md for PR #961
• 736302e Fix uri-template rejecting non-Latin literals on PCRE2 10.46 (#961)
• 75591be docs: Update CHANGELOG.md for PR #960
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 249a121f-acd2-4128-964e-94e1a41c8e16

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[dependabot]

Superseded by #67.