chore(deps): bump safety-schemas 0.0.16 → 0.0.19

[gussotoridd]

Summary

Bumps the pinned safety-schemas dependency from 0.0.16 to 0.0.19.

0.0.19 emits timezone-aware UTC scan timestamps (MetadataModel.timestamp now defaults via default_factory returning datetime.now(timezone.utc) instead of a bare, timezone-naive datetime.now()). Both fresh-emit sites in this repo — the scan decorator and init_scan — construct MetadataModel without passing timestamp, so they rely on that default; picking up 0.0.19 is what makes the CLI emit unambiguous UTC, which stops scan ingest from misreading naive stamps as UTC.

API surface across 0.0.16 → 0.0.19 is additive only (new PackageEcosystem / InstallationAction exports and installation config models); nothing this CLI imports was removed or renamed, and the models.events subpackage it depends on is unchanged.

Draft — do not merge until safety-schemas==0.0.19 is published to PyPI (pyupio/safety_schemas#43 bumps the version; the tag/build/publish is a manual step after that merges). CI here will fail to resolve the dependency until then.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: fe476335-e059-4fc7-9876-c8d843d9dd1c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch deps/bump-safety-schemas-0.0.19

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

Pull request overview

This PR updates the project’s pinned safety-schemas dependency to pick up newer schema behavior (notably the switch to timezone-aware UTC timestamps by default), which affects how scan metadata timestamps are emitted by the CLI.

Changes:

• Bump safety-schemas from 0.0.16 to 0.0.19 in project dependencies.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

[safety-bot]

🚀 Artifacts — PR #898 by @gussotoridd

Security notice: You are viewing pre-release CI artifacts from PR #898 by @gussotoridd. These commands may execute code on your machine. Do NOT run them unless you have reviewed the PR diff and trust the source. The snippets include a confirmation prompt.

Download the wheel file and binaries with gh CLI or from the workflow artifacts.

📦 Install & Run

Pre-requisites

# Install uv if needed
curl -LsSf https://astral.sh/uv/install.sh | sh

# Create and enter artifacts directory
mkdir artifacts && cd artifacts

Quick Test with Python Package

bash -c 'set -euo pipefail; echo; echo "WARNING: You are about to download and execute CI artifacts from PR #898 by @gussotoridd. Do NOT proceed unless you have reviewed the PR diff and trust the source."; echo; read -rp "Type I understand to continue: " C; [ "$C" = "I understand" ] || { echo "Aborted."; exit 1; }; gh run download 29854559218 -n dist -R pyupio/safety; uvx safety-*-py3-none-any.whl --version'

Run other Safety commands as follows

uvx safety-*-py3-none-any.whl auth status
uvx safety-*-py3-none-any.whl auth login
uvx safety-*-py3-none-any.whl scan

Note: You need to be logged in to GitHub to access the artifacts.

[yeisonvargasf]

Thanks