chore(deps): bump safety-schemas 0.0.19 → 0.0.20 - #910
Conversation
|
Important Review skippedAuto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Plus Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
is this the right repo? This is open source Safety |
Mighty303
left a comment
There was a problem hiding this comment.
assuming high confidence low risk
safety-schemas 0.0.20 adds the
ai-installationblock to the v3.0 Config schema (pyupio/safety_schemas#44).The v3.0 models reject unknown keys, and
download_policyparses the raw cloud policy with them — so a CLI on 0.0.19 hard-fails the scan the moment an org policy carries the new block. This bump lets releases from here on parse such policies. A policy without the block parses unchanged.Note for rollout: this protects future releases only — already-installed CLIs keep their vendored 0.0.19 and still fail on a policy carrying the block. Serving-side handling for old clients is a separate platform concern.