Skip to content

chore(vendor): move source-built vendor pins to each repo's main - #8325

Merged
M3gA-Mind merged 2 commits into
tinyhumansai:mainfrom
M3gA-Mind:chore/vendor-pins-to-main
Oct 23, 2026
Merged

M3gA-Mind merged 2 commits into
tinyhumansai:mainfrom
M3gA-Mind:chore/vendor-pins-to-main

Conversation

@M3gA-Mind

@M3gA-Mind M3gA-Mind commented Oct 23, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Moves the source-built vendor pins to each repo's current main, so that openhuman builds against every merged vendor change. No vendor release is needed for these: openhuman builds them from the gitlinks.

gitlink from to commits
vendor/tinystoragedrivers 05eaada f05fbd2 2
vendor/tinybus 2b2ac16 809eef2 39
vendor/tinymemory 6018a91 8b919fd 20
vendor/tinyskills e330b68 d74e9d5 8
vendor/tinyhumans-sdk 4f516fa f42b128 30
vendor/tiny-artifacts e4aecbe 25a7cf9 16

Every move is a fast-forward: each old pin is an ancestor of the new one. The 12 tinystoragedrivers rev = pins in openhuman-cli, openhuman-core, openhuman-embed and openhuman-rpc move with the gitlink. The root [patch] still redirects them to vendor/tinystoragedrivers.

Manifest changes in these ranges, which explain the lockfile diff:

  • tiny-artifacts adds cap-std = "4" and the tokio rt feature.
  • tinybus moves ureq 3.3 → 3.5.
  • tinystoragedrivers gives tinystoragedrivers-bus a version = "2.1.0".

vendor/tinyagents is not moved here. Its current pin ed2880b carries commits that tinyagents main lacks, including the wait tools that openhuman-core imports. Those are being ported to tinyagents main first, and tinyagents follows via TA-MAIN-2325.

Module repos (wallet, channels, juice, mcp, flows, …) are not part of this PR.

Status

  • Gitlinks and rev = pins
  • Lockfiles (root and crates/openhuman-app), regenerated with cargo metadata on the CI host. Only change: cap-std on tiny-artifacts, plus tinydocs-bus 0.2.4 → 0.2.5 in the app lock, which was already on main's gitlink and root lock. tokio stays at 1.54.1.
  • Build and test: full lanes on the CI host at 1e04926, no new failures against the main baseline 9b3e2d8.
  • vendor/tinyagents: follows via TA-MAIN-2325

Tests

Checked on the shared CI host against a main baseline. Only failures that are new against main are attributed to this PR.

Summary by CodeRabbit

  • Chores
    • Updated bundled components and supporting internals. No end-user-facing changes are specified in this update.

Moves these gitlinks forward to their repo's current main (each one a
fast-forward):

- vendor/tinystoragedrivers 05eaada -> f05fbd2, with the 12
  tinystoragedrivers `rev =` pins in the cli, core, embed and rpc
  manifests kept equal to the gitlink
- vendor/tinybus 2b2ac16 -> 809eef2
- vendor/tinymemory 6018a91 -> 8b919fd
- vendor/tinyskills e330b68 -> d74e9d5
- vendor/tinyhumans-sdk 4f516fa -> f42b128
- vendor/tiny-artifacts e4aecbe -> 25a7cf9

Lockfiles follow in their own commit.
@coderabbitai

coderabbitai Bot commented Oct 23, 2026 •

Copy link
Copy Markdown
Contributor

Review in Change Stack →

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 10099324-c0f6-40b7-9c40-a59f34f99e55
📥 Commits

Reviewing files that changed from the base of the PR and between 9b3e2d8 and 1e04926.

⛔ Files ignored due to path filters: 2
  • Cargo.lock is excluded by !**/*.lock
  • crates/openhuman-app/Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing: 10
  • crates/openhuman-cli/Cargo.toml
  • crates/openhuman-core/Cargo.toml
  • crates/openhuman-embed/Cargo.toml
  • crates/openhuman-rpc/Cargo.toml
  • vendor/tiny-artifacts
  • vendor/tinybus
  • vendor/tinyhumans-sdk
  • vendor/tinymemory
  • vendor/tinyskills
  • vendor/tinystoragedrivers

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 8 remain after this review.

📝 Walkthrough

The pull request updates six vendored project references and changes OpenHuman manifest pins for tinystoragedrivers dependencies to revision f05fbd230c2c403c8dcdef57316fa55265379039. Existing dependency features and optionality remain unchanged.

Changes: Dependency revision refresh

Layer / File(s) Summary
Update vendored references
vendor/tiny-artifacts, vendor/tinybus, vendor/tinyhumans-sdk, vendor/tinymemory, vendor/tinyskills, vendor/tinystoragedrivers
Six vendored project references now point to different commits.
Align dependency pins
crates/openhuman-cli/Cargo.toml, crates/openhuman-core/Cargo.toml, crates/openhuman-embed/Cargo.toml, crates/openhuman-rpc/Cargo.toml
The tinystoragedrivers dependencies and testkit pins now use revision f05fbd230c2c403c8dcdef57316fa55265379039. Existing features and optionality are unchanged.

Priority: ⬇️ Low

Estimated code review effort: 2 (Simple) | ~10 minutes

Change: Other

Possibly related issues

Possibly related PRs

  • tinyhumansai/openhuman#8212: That PR uses tinystoragedrivers-testkit in embed tests, and this pull request updates the dependency revision used by the manifests.

Suggested reviewers: senamakel

Merge Risk: ⚪ Minimal · up to 1e049

No actionable issue is established from these revision updates; the PR is mergeable after normal checks.

Pre-merge checks: Passed 5
Check name Status Explanation
Description Check Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check Passed The title "chore(vendor): move source-built vendor pins to each repo's main" matches the main change. The PR advances six vendor gitlinks and the 12 tinystoragedrivers rev pins in the manifests to the…
Docstring Coverage Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title "chore(vendor): move source-built vendor pins to each repo's main" matches the main change. The PR advances six vendor gitlinks and the 12 tinystoragedrivers rev pins in the manifests to the new revisions. The title names the vendor pin update but does not mention the tinystoragedrivers manifest pins or the lockfile sync. Those are secondary details, so the title is accurate and specific enough.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (10 skipped: 10 unsupported.)

✨ Finishing Touches: 💡 1
🛠️ Fix failing CI checks: 💡
  • Commit to this branch
  • Create a new PR
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

A rabbit checks the pins in place,
Then hops through commits at a steady pace.
The storage drivers find a newer home,
While tiny projects shift their roam.
The manifest rows now match the trail,
And carrot crumbs mark every nail.

Comment @coderabbitai help to get the list of available commands.

tiny-artifacts now depends on cap-std (already in both locks). The app
lock also picks up tinydocs-bus 0.2.5, which was already on main's
gitlink and root lock but missing from crates/openhuman-app/Cargo.lock.
Regenerated with `cargo metadata` only, no `cargo update`; tokio stays at
1.54.1.
M3gA-Mind added a commit to M3gA-Mind/openhuman that referenced this pull request Oct 23, 2026
vendor/tinydocs and the root Cargo.lock are already at 0.2.5; the app
lock still said 0.2.4, so cargo --locked refused it. Same line as tinyhumansai#8325,
so the two merge cleanly in either order.
@M3gA-Mind
M3gA-Mind marked this pull request as ready for review October 23, 2026 17:55
@tinysweeper

tinysweeper Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Tiny Sweeper review

Reviewed head: 1e04926d3730fb198b22a3c740bca067e6601307

Findings

No active actionable findings.

Advisory notes

  • medium: Describe only the manifest pin changes the diff contains ((pull request description))
    Problem: The diff changes nothing but `rev =` strings for tinystoragedrivers in `crates/openhuman-cli`, `-core`, `-embed` and `-rpc`. The body describes a much larger change: six gitlink mo
    Suggested fix:
    No concrete fix was supplied.

Verdict: Ready for maintainer review · Priority: none
Coverage: Reviewed 4 of 12 files; not reviewed: Cargo.lock, crates/openhuman…, and 6 additional unreviewed files.

Diagnostics and supporting details

Full summary

Pull request purpose (title): chore(vendor): move source-built vendor pins to each repo's main. This PR is titled "chore(vendor): move source-built vendor pins to each repo's main" and described as moving source-built vendor pins so openhuman builds against every merged vendor change, with the 12 tinystoragedrivers `rev =` pins in openhuman-cli, openhuman-core, openhuman-embed and openhuman-rpc moving alongside the gitlink and the root `[patch]` still redirecting them to `vendor/tinystoragedrivers`. The evidence available for this review covers only four changed manifests — crates/openhuman-cli/Cargo.toml, crates/openhuman-core/Cargo.toml, crates/openhuman-embed/Cargo.toml, crates/openhuman-rpc/Cargo.toml — in which git dev-dependency revisions for `tinystoragedrivers`, `tinystoragedrivers-api`, `tinystoragedrivers-connect`, `tinystoragedrivers-types`, `tinystoragedrivers-secrets`, `tinystoragedrivers-bus`, `tinystoragedrivers-busproxy` and `tinystoragedrivers-testkit` are rewritten from `05eaada962decbab33bafa4763d2bd1a67f6b456` to `f05fbd230c2c403c8dcdef57316fa55265379039`. The description lane, which answered, flagged that the diff only moves the source-built tinystoragedrivers pins in four manifests and that the PR body's additional claims — gitlink moves for tinystoragedrivers/tinybus/tinymemory/tinyskills/tinyhumans-sdk/tiny-artifacts and lockfile changes including tiny-artifacts cap-std and tinydocs-bus 0.2.4 → 0.2.5 — do not appear in this diff, so the description overstates the change as written. Note the code index is behind this PR (indexed at b39fbd8), so retrieved context may be out of date.

Unreviewed paths

  • Cargo.lock
  • crates/openhuman-app/Cargo.lock
  • vendor/tiny-artifacts
  • vendor/tinybus
  • vendor/tinyhumans-sdk
  • vendor/tinymemory
  • vendor/tinyskills
  • vendor/tinystoragedrivers

Review snapshot

Change surface Files Review signal Count
Production 0 Active findings 0
Tests 0 Noted findings 1
Documentation 0 Resolved findings 0
Configuration 4 Pending checks/questions 0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The changed manifests update the git `rev` pin for the source-built tinystoragedrivers crates from `05eaada962decbab33bafa4763d2bd1a67f6b456` to `f05fbd230c2c403c8dcdef57316fa55265379039`. In crates/openhuman-cli/Cargo.toml the dev-dependencies `tinystoragedrivers-api` and `tinystoragedrivers` (with `default-features = false, features = ["sqlite"]`) move to the new revision, which the critique lane notes is already the revision the core, embed, rpc and cli crates use. In crates/openhuman-core/Cargo.toml the same move is applied to `tinystoragedrivers`, `tinystoragedrivers-api`, `tinystoragedrivers-connect` (optional, features `["sqlite"]`), `tinystoragedrivers-types`, `tinystoragedrivers-secrets` (features `["document"]`), `tinystoragedrivers-bus`, `tinystoragedrivers-busproxy` and, in dev-dependencies, `tinystoragedrivers-testkit`. In crates/openhuman-embed/Cargo.toml `tinystoragedrivers-testkit` moves, and in crates/openhuman-rpc/Cargo.toml `tinystoragedrivers` (optional, features `["keyring"]`) moves. The whole-PR diffstat covers 12 files including lockfiles and vendor gitlinks, but the rendered evidence available here shows only these four manifest edits.

Features

  • Modified — openhuman-cli dev-dependency tinystoragedrivers git revision: Points the CLI's `tinystoragedrivers-api` and `tinystoragedrivers` dev-dependencies (the latter with `default-features = false, features = ["sqlite"]`) at `f05fbd230c2c403c8dcdef57316fa55265379039` instead of `05eaada962decbab33bafa4763d2bd1a67f6b456`, which the critique lane characterizes as making the dev graph resolve to the same git checkout rather than two. (crates/openhuman-cli/Cargo.toml serde = { version = "1", features = ["derive"] })
  • Modified — openhuman-core tinystoragedrivers git revisions: Updates `tinystoragedrivers`, `tinystoragedrivers-api`, `tinystoragedrivers-connect` (optional, features `["sqlite"]`), `tinystoragedrivers-types`, `tinystoragedrivers-secrets` (features `["document"]`), `tinystoragedrivers-bus`, `tinystoragedrivers-busproxy` and dev-dependency `tinystoragedrivers-testkit` to revision `f05fbd230c2c403c8dcdef57316fa55265379039`. Feature sets, optionality and `default-features` settings are unchanged. (crates/openhuman-core/Cargo.toml tinyagents-session = { path = "../../vendor/tinyagents/crates/tinyagents-session, crates/openhuman-core/Cargo.toml windows-sys = { version = "0.61", features = [)
  • Modified — openhuman-embed dev-dependency tinystoragedrivers-testkit git revision: Moves the embed crate's `tinystoragedrivers-testkit` dev-dependency to revision `f05fbd230c2c403c8dcdef57316fa55265379039`, keeping it aligned with the other crates' pin. (crates/openhuman-embed/Cargo.toml tinymcp = { path = "../../vendor/tinymcp/crates/tinymcp", features = ["static-li)
  • Modified — openhuman-rpc tinystoragedrivers git revision: Moves the rpc crate's optional `tinystoragedrivers` dependency (features `["keyring"]`, `default-features = false`) to revision `f05fbd230c2c403c8dcdef57316fa55265379039`. (crates/openhuman-rpc/Cargo.toml e2e-test-support = ["openhuman-tinyhumans/e2e-test-support"])

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Before merge

None.

Agent review details

critique

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Positive: The critique lane answered over 4 of 4 changed files and reported no defect in the changed lines, describing the edit as a consistency fix that makes the dev graph resolve to the same git checkout instead of two.
  • Lane summary: The change bumps both dev-dependency git revisions for `tinystoragedrivers-api` and `tinystoragedrivers` in the CLI crate to `f05fbd230…`, which is already the revision the core, embed, rpc and cli crates use — a consistency fix that makes the dev graph resolve to the same git checkout instead of two. I found no defect in the changed lines. 4 file(s) are the mechanical rename `05eaada962decbab33bafa4763d2bd1a67f6b456` → `f05fbd230c2c403c8dcdef57316fa55265379039`, verified line for line; one of them was read to judge the substitution itself, the rest were not sent to a model. _The code index is behind this pull request (indexed at `b39fbd83e72e`), so retrieved context may be out of date._

security

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Positive: The security lane answered with no findings.
  • Lane summary: Reviewed 0 files; 0 findings. 4 file(s) are the mechanical rename `05eaada962decbab33bafa4763d2bd1a67f6b456` → `f05fbd230c2c403c8dcdef57316fa55265379039`, verified line for line; one of them was read to judge the substitution itself, the rest were not sent to a model. _The code index is behind this pull request (indexed at `b39fbd83e72e`), so retrieved context may be out of date._

tests

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Positive: The commits lane answered, reporting no sensitive content in committed files.
  • Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `b39fbd83e72e`), so retrieved context may be out of date._

description

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Positive: The description lane answered, observing that the diff only moves source-built tinystoragedrivers pins from 05eaada to f05fbd2 in four manifests and matches the PR body's claim that 12 `rev =` pins move with the gitlink, but also that the body's gitlink moves and lockfile changes do not appear in this diff, so the description overstates the change as written.
  • Lane summary: The diff only moves source-built tinystoragedrivers pins from 05eaada to f05fbd2 in four manifests, which matches the PR body's claim that 12 `rev =` pins move with the gitlink. The body also claims gitlink moves for tinystoragedrivers/tinybus/tinymemory/tinyskills/tinyhumans-sdk/tiny-artifacts and lockfile changes (tiny-artifacts cap-std, tinydocs-bus 0.2.4 → 0.2.5), none of which appear in this diff, so the description overstates the change as written. _The code index is behind this pull request (indexed at `b39fbd83e72e`), so retrieved context may be out of date._
Evidence and run details
  • Models: ladder/vectors-oai3, deepseek-v4.1-flash
  • Spend: $0.001727
  • Tokens: 99394 input · 4110 output · 0 cached · 214 embedding
  • Updated: 2026-10-23T17:56:39Z
Head State Pass summary
1e04926d3730 ready for maintainer review 0 active finding(s), 0 resolved finding(s) (at 2026-10-23T17:56:39Z)

tinysweeper 0.1.2

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 23, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-23T17:58:38.715105Z 1e04926 Draft marked ready
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@tinysweeper tinysweeper Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0017

@tinysweeper tinysweeper Bot added the priority: p3 Whenever. Cosmetic, a nicety, or a cleanup with no user visible effect. label Oct 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

priority: p3 Whenever. Cosmetic, a nicety, or a cleanup with no user visible effect.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant