chore(deps): bump stix2-validator from 3.2.0 to 3.3.1

[dependabot]

Bumps stix2-validator from 3.2.0 to 3.3.1.

Release notes

Sourced from stix2-validator's releases.

cti-stix-validator v3.3.1 released

What's Changed

• Update on the latest pattern validator version and quick fix on the tests by @​chrisr3d in oasis-open/cti-stix-validator#247

Full Changelog: oasis-open/cti-stix-validator@v3.3.0...v3.3.1

cti-stix-validator v3.3.0 Release Notes

Release date: 2026-05-12

Overview

cti-stix-validator v3.3.0 updates the supported Python versions, refreshes schema support, improves validation behavior around timestamp comparisons, and includes several test and documentation improvements.

This release also includes performance improvements for schema lookup caching and additional fixes around STIX object reference validation.

Highlights

• Updated supported Python versions, including support for Python 3.14.
• Added the required minimum Python version metadata.
• Improved timestamp comparison handling to avoid validation errors when malformed timestamp values are encountered.
• Updated schema pinning to the latest STIX 2.1 schema commit.
• Improved schema lookup performance through caching.
• Fixed object reference validation to prevent invalid SDO usage in SCO object reference properties.
• Updated maintainers list and ReadTheDocs configuration.
• Added and improved tests for timestamp handling, campaign objects, STIX 2.0 Course of Action objects, and object reference validation.

Changes

Python Support

• Bumped the latest supported version.
• Added the required minimum Python version.
• Updated the list of supported Python versions.
• Added Python 3.14 support.

Validation Fixes

• Fixed timestamp field comparison to avoid exceptions when comparing invalid or improperly formatted timestamp values.
• Added checks to ensure both timestamp values are valid datetime objects before comparison.
• Improved handling of cases where one timestamp may still be a string due to invalid formatting.
• Fixed additional datetime comparison issues that could previously lead to incorrect negative validation results.

STIX Schema and Object Reference Validation

• Updated schema pinning to the latest STIX 2.1 schema commit.
• Improved validation for object_refs.
• Added schema allow/deny patterns to limit object_refs to SCO and SRO where appropriate.

... (truncated)

Changelog

Sourced from stix2-validator's changelog.

CHANGELOG

Commits

• d3ef2a5 Merge branch 'master' of github.com:oasis-open/cti-stix-validator
• 3059025 chg: [release] version v3.3.1
• d9266a9 Merge pull request #247 from chrisr3d/master
• 7d4af31 fix: [tests] Trying with a better assertion for error message raised with inv...
• b767784 Merge branch 'master' of github.com:oasis-open/cti-stix-validator
• ae71357 fix: Using latest pattern validator version
• 9e4a1ea Merge pull request #246 from chrisr3d/master
• 1885714 chg: Bumped latest version and added required minimum python version
• 503daa7 Merge branch 'master' of github.com:chrisr3d/cti-stix-validator
• fbcf543 Merge branch 'master' of github.com:oasis-open/cti-stix-validator
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)