chore(deps):(deps): update stac-valid requirement from ~=4.2.2 to >=4.2.2,<4.6.0

[dependabot]

Updates the requirements on stac-valid to permit the latest version.

Release notes

Sourced from stac-valid's releases.

v4.5.1

What's Changed

• Schema dictionary support by @​jonhealy1 in StacLabs/stac-validator#306

Full Changelog: StacLabs/stac-validator@v4.5.0...v4.5.1

Changelog

Sourced from stac-valid's changelog.

[v4.5.1] - 2026-07-30

Changed

• rebuilt the fastjsonschema compilation pipeline with in-memory schema patching to flawlessly compile complex extensions (e.g., file, storage) at ~1ms speeds, bypassing upstream compiler bugs.

Added

• Added standard Python logging to expose cache and network events to FastAPI backend integrations.

[v4.5.0] - 2026-07-30

Added

• Added an opt-in validate_geometry flag to FastValidator. When enabled, it performs pure-Python spatial checks to ensure coordinates fall within global WGS84 bounds and detects improper antimeridian crossings in Polygons/MultiPolygons.
• Added a strict 5000-vertex limit to the new geometry validation rings. This acts as a safeguard to prevent CPU exhaustion or thread lockups when processing excessively complex coastal or generated polygons.
• Added pure-Python checks to FastValidator that ensure an item's start_datetime is never strictly after its end_datetime. #304

Changed

• Completely refactored the fallback logic in fast_validator to remove the heavy python-jsonschema dependency block. If the dynamic allOf schema compiler fails (often caused by internal reference collisions in the storage or file extensions), the validator now gracefully compiles the base schema and compatible extensions individually, cleanly skipping incompatible extensions to maintain blazing-fast API ingestion speeds. #304

Fixed

• Fixed a fatal KeyError: 'definitions' crash in fast_validator caused by complex STAC extensions attempting to resolve local $ref pointers (like #/definitions/links) against an empty synthetic root. #304

[v4.4.0] - 2026-05-11

Added

• support for --recursive option for fast command to validate static STAC catalogs. #294
• support for --api option for fast command to validate STAC API endpoints. #294
• support for --limit option for fast command to cap the number of STAC objects validated. #294
• Added run_dict method to FastValidator for direct in-memory dictionary validation without file/network loading. #294

[v4.3.0] - 2026-05-08

Added

• STAC-Valid API & Containerization: Added a FastAPI-based server for high-speed remote validation, an optimized uv-based Dockerfile, and a GitHub Actions workflow for automatic image publication to GHCR. #293

[v4.2.2] - 2026-04-29

Added

• Added message output for fast validator command #292

Removed

... (truncated)

Commits

• c6e4fbe Schema dictionary support (#306)
• d814031 fix: fast validator get_validator fallback mechanism (#304)
• 5f5e7f9 add --recursive to fast validation (#294)
• 9060756 ci(deps):(deps): bump docker/build-push-action from 5 to 7 (#297)
• 03ac73a ci(deps):(deps): bump docker/metadata-action from 5 to 6 (#298)
• 51e7a46 ci(deps):(deps): bump docker/login-action from 3 to 4 (#296)
• 2d7916a ci(deps):(deps): bump actions/checkout from 4 to 6 (#295)
• 03599ab Change validation script from test_api.py to api_client_example.py
• 93926e7 Update Docker image and sample data in README
• 9afcf01 Add server image for dockerized fast valdation (#293)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)