Skip to content

chore(vendor): bump nested submodules to released versions - #123

Merged
senamakel merged 3 commits into
mainfrom
bump-vendor-releases
Oct 26, 2026
Merged

senamakel merged 3 commits into
mainfrom
bump-vendor-releases

Conversation

@senamakel

@senamakel senamakel commented Oct 26, 2026 •

Copy link
Copy Markdown
Member

Bumps vendor/tinybus to v0.3.6, vendor/tinyagents to v3.1.0 (nested tinytools v0.6.0, tinyinference v0.5.0, tinyliveagents v0.1.1), updates version/rev pins and Cargo.lock. tinystoragedrivers stays at 2.1.0 rev 05eaada (matches tinyinference v0.5.0 pin, avoids duplicate crate). No code changes needed; clippy -D warnings, rustdoc, fmt, nextest (974 pass) and the examples crate are clean locally.

Summary by CodeRabbit

  • Chores
    • Updated the revisions of several supporting components and advanced one example component to a newer version. These are maintenance updates; no changes to exported or public interfaces were reported. The summary does not specify any user-visible behavior changes.

senamakel and others added 3 commits October 26, 2026 06:39
Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
Update the tinybus and tinybus-module pins to 0.3.6 at a newer revision, and
advance the tinytools and tinyagents-harness git revisions to their latest
commits. The lockfile is regenerated to match, which also pulls getrandom back
to 0.3.4.

Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
Regenerated the examples lockfile after dropping dependencies that are no longer referenced, removing stale entries such as aead, chacha20poly1305, hkdf, hmac, and fs4. This shrinks the lockfile and keeps it consistent with the current dependency graph.

Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
@tinysweeper

tinysweeper Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Tiny Sweeper review

Reviewed head: 0d4bf026fb41695e3da7d7560f814ba5dc0a9cdb

Findings

No active actionable findings.

Advisory notes

  • medium: Update the description to match the actual lockfile and submodule changes ((pull request description))
    Problem: The description does not match what the diff does.
    Suggested fix:
    No concrete fix was supplied.

Verdict: Ready for maintainer review · Priority: medium
Coverage: Reviewed 4 of 8 files; not reviewed: Cargo.lock, crates/tinyjuice…, and 2 additional unreviewed files.

Diagnostics and supporting details

Full summary

Pull request purpose (title): chore(vendor): bump nested submodules to released versions. Tiny Sweeper completed its review; deterministic results follow.

Unreviewed paths

  • Cargo.lock
  • crates/tinyjuice-examples/Cargo.lock
  • vendor/tinyagents
  • vendor/tinybus

Review snapshot

Change surface Files Review signal Count
Production 0 Active findings 0
Tests 0 Noted findings 1
Documentation 0 Resolved findings 0
Configuration 4 Pending checks/questions 0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The changes re-pin optional git dependencies: tinytools moves to rev 41cc80ac in the root manifest (Cargo.toml#resolver = "3" context) and in the host crate, tinyagents-harness moves from 3.0.0 to 3.1.0 in the examples crate, and tinybus/tinybus-module move from =0.1.6 at rev 0de2d283 to =0.3.6 at rev 6ce06bc6 in the module crate for both normal and dev-dependency scopes. The whole-pull-request file list also includes Cargo.lock, examples Cargo.lock, and the vendor/tinyagents and vendor/tinybus submodule gitlinks, though the rendered diff does not show those hunks.

Features

  • Modified — tinytools pinned to new revision: Both the optional root dependency and the host crate's direct dependency now resolve to rev 41cc80ac instead of 3a01641f, aligning tinytools across the workspace with the version shipped by the bumped tinyagents vendor. (Cargo.toml resolver = "3", crates/tinyjuice-host/Cargo.toml async-trait = "0.1")
  • Modified — tinyagents-harness bumped to 3.1.0: The examples crate consumes tinyagents-harness 3.1.0 from the vendored path, matching the described tinyagents v3.1.0 vendor bump. (crates/tinyjuice-examples/Cargo.toml publish = false)
  • Modified — tinybus and tinybus-module moved to 0.3.6: The module crate's normal and dev-dependency pins both move from =0.1.6 to =0.3.6 at rev 6ce06bc6, a two-minor-version jump for the interface crate the module's bus adapters compile against; the test-support dev dependency moves with it to keep test and production feature sets on the same crate version. (crates/tinyjuice-module/Cargo.toml log = "0.4", crates/tinyjuice-module/Cargo.toml tinyjuice = { path = "../..", default-features = false, features = ["jq"] })

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Before merge

None.

Agent review details

critique

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Lane summary: Reviewed 4 files; 0 findings. _The code index is behind this pull request (indexed at `a5c762f6d26e`), so retrieved context may be out of date._

security

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Lane summary: Reviewed 4 files; 0 findings. _The code index is behind this pull request (indexed at `a5c762f6d26e`), so retrieved context may be out of date._

tests

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Positive: The commits lane answered with no findings and reported no sensitive content in committed files.
  • Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `a5c762f6d26e`), so retrieved context may be out of date._

description

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Positive: The description lane answered with a mismatch finding: the title claims nested submodules are bumped but no submodule gitlink appears in the diff, and the body claims Cargo.lock is updated while no Cargo.lock hunk is present.
  • Positive: The description lane further noted the body says no code changes are needed without mentioning the tinybus move from 0.1.6 to 0.3.6, a two-minor-version jump whose submodule pins are not shown in the diff.
  • Lane summary: The diff only rewrites version and rev pins in four Cargo.toml files, so the code review is trivial; the question is whether the description matches. It does not: the title says nested submodules are bumped, but no submodule gitlink appears in the diff, and the body claims Cargo.lock is updated when no Cargo.lock hunk is present. The body also says "No code changes needed" without mentioning that tinybus moves from 0.1.6 to 0.3.6 (a two-minor-version jump) while the submodule pins that would provide the new tinybus state aren't shown. I flag the description mismatch and not the pin changes themselves, which are compilable by inspection. _The code index is behind this pull request (indexed at `a5c762f6d26e`), so retrieved context may be out of date._
Evidence and run details
  • Models: ladder/vectors-oai3, deepseek-v4.1-flash
  • Spend: $0.000724
  • Tokens: 480010 input · 7408 output · 81920 cached · 210 embedding
  • Updated: 2026-10-26T06:41:25Z
Head State Pass summary
0d4bf026fb41 ready for maintainer review 0 active finding(s), 0 resolved finding(s) (at 2026-10-26T06:41:25Z)

tinysweeper 0.1.2

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-26T06:42:15.082748Z 0d4bf02 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Review in Change Stack →

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: df9c4625-d049-47a1-8cc6-ac7101f42409
Commits

Reviewing files that changed from the base of the PR and between e2e51f7 and 0d4bf02.

Files ignored due to path filters: 2
  • Cargo.lock is excluded by !**/*.lock
  • crates/tinyjuice-examples/Cargo.lock is excluded by !**/*.lock
Files selected for processing: 6
  • Cargo.toml
  • crates/tinyjuice-examples/Cargo.toml
  • crates/tinyjuice-host/Cargo.toml
  • crates/tinyjuice-module/Cargo.toml
  • vendor/tinyagents
  • vendor/tinybus

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

Cargo dependency versions and Git revisions changed for TinyTools, TinyBus, and TinyAgents. The TinyBus and TinyAgents vendored references also point to updated commits.

Changes: Dependency updates

Layer / File(s) Summary
TinyBus dependency and vendor revision
crates/tinyjuice-module/Cargo.toml, vendor/tinybus
The TinyBus runtime and development dependencies changed to version 0.3.6 at the updated revision. The vendored reference now points to that revision.
TinyTools revision
Cargo.toml, crates/tinyjuice-host/Cargo.toml
Both TinyTools dependency declarations now use the updated Git revision.
TinyAgents harness and vendor revision
crates/tinyjuice-examples/Cargo.toml, vendor/tinyagents
The harness dependency changed to version 3.1.0, and the vendored TinyAgents reference changed to a new commit.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Possibly related issues

  • tinyhumansai/chottu-core#230: The issue mentions TinyAgents in its latency and prompt-cache work; this PR updates the TinyAgents reference, but the available summary does not establish that it implements those requirements.
  • tinyhumansai/chottu-core#224: The issue mentions TinyAgents context handling; this PR updates the TinyAgents reference, but the available summary does not establish that it changes context handling.

Possibly related PRs

  • tinyhumansai/tinyjuice#119: This PR continues the TinyAgents dependency update by changing the vendored reference and harness version.

Suggested reviewers: tinysweeper

Merge Risk: Minimal · up to 0d4bf

This dependency bump has no identified behavior regression. Normal CI should confirm the build before merge.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title clearly and concisely describes the main change: updating vendor submodules and dependency pins to released versions.
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (6 skipped: 6 unsupported.)

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

I’m a rabbit with a version list,
I hop past pins that have been refreshed.
TinyBus moves to a newer commit,
TinyTools follows its revised tag.
TinyAgents gets a newer home,
And I tuck these changes into my burrow.

Comment @coderabbitai help to get the list of available commands.

@tinysweeper tinysweeper Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0007

@tinysweeper tinysweeper Bot added the priority: p2 Soon. Real but survivable — a rough edge, a gap, a thing that will bite later. label Oct 26, 2026
@senamakel
senamakel merged commit 076b1bc into main Oct 26, 2026
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

priority: p2 Soon. Real but survivable — a rough edge, a gap, a thing that will bite later.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant