Skip to content

chore(deps): bump safety-schemas 0.0.19 → 0.0.20 - #910

Open
mmounirou wants to merge 1 commit into
mainfrom
chore/bump-safety-schemas-0.0.20
Open

chore(deps): bump safety-schemas 0.0.19 → 0.0.20#910
mmounirou wants to merge 1 commit into
mainfrom
chore/bump-safety-schemas-0.0.20

Conversation

@mmounirou

Copy link
Copy Markdown

safety-schemas 0.0.20 adds the ai-installation block to the v3.0 Config schema (pyupio/safety_schemas#44).

The v3.0 models reject unknown keys, and download_policy parses the raw cloud policy with them — so a CLI on 0.0.19 hard-fails the scan the moment an org policy carries the new block. This bump lets releases from here on parse such policies. A policy without the block parses unchanged.

Note for rollout: this protects future releases only — already-installed CLIs keep their vendored 0.0.19 and still fail on a policy carrying the block. Serving-side handling for old clients is a separate platform concern.

@coderabbitai

coderabbitai Bot commented Aug 20, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: bb856e43-fe51-4001-a2e8-fe828113d208

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@Mighty303

Copy link
Copy Markdown
Contributor

is this the right repo? This is open source Safety

@Mighty303 Mighty303 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

assuming high confidence low risk

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants