You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
chore(deps): pin tinytools and tinyinference to the mains that carry the security migration - #594
Before #585 and 21ba878, this repo pinned both to senamakel/*epic/8369-security-migration commits that weren't on upstream main. Moving to upstream main dropped that work, and hosts that depend on it (OpenHuman's sub-agent rule policy and embedding/catalog factories) stopped compiling against tinyagents main. Now that the epic is on both upstream mains, this pins it from there.
Cargo.lock: adds sha2 0.11.1 (the tinyinference credential fingerprint).
Public API
None in tinyagents. Downstream hosts get the tinyinference async factory signatures, which is a breaking change for hosts that register overrides.
Validation
cargo fmt --all -- --check: ok
cargo clippy --workspace --all-targets --all-features -- -D warnings: ok
cargo check --workspace --all-targets --locked: ok
cargo test --workspace: ok
Summary by CodeRabbit
Chores
Updated the bundled inference and utility components to newer revisions.
No changes to user-facing features or workflows are specified in this update. The available change summary does not describe any new capabilities, behavior changes, or fixes, so no further end-user impact can be confirmed.
Update the vendored tinyinference and tinytools submodules to their latest commits.
Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
Record the sha2 0.11.1 dependency in Cargo.lock so the resolved dependency graph stays consistent with the manifest.
Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
Updates the pinned commits for the tinyinference and tinytools vendored submodules to their latest revisions.
Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
Verdict: Ready for maintainer review · Priority: none Coverage: File coverage is unavailable.
Pull request purpose (title): chore(deps): pin tin…
Diagnostics and supporting details
Full summary
Pull request purpose (title): chore(deps): pin tinytools and tinyinference to the mains that carry the security migration. Tiny Sweeper reviewed this change across 5 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.
Review snapshot
Change surface
Files
Review signal
Count
Production
0
Active findings
0
Tests
0
Noted findings
0
Documentation
0
Resolved findings
0
Configuration
0
Pending checks/questions
0
Completeness: Complete Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.
Features
None identified with supported citations.
Tests
No supported feature-to-test mapping was produced. Test execution is not inferred.
Findings
No active actionable findings.
Before merge
None.
Agent review details
critique
Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.
security
Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.
tests
Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.
commits
Conclusion: Success
Scope reviewed: all assigned evidence
Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `8c12e4bc66cb`), so retrieved context may be out of date._
description
Conclusion: Neutral
Scope reviewed: all assigned evidence
Lane summary: No added or modified lines to review.
integration-proofs/run-ledger-mongodb/Cargo.lock is excluded by !**/*.lock
CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.
Run configuration
Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: 12d01b48-fbaa-4cda-b63a-f5b12e815f6d
You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.
Use the checkbox below for a quick retry:
Trigger review
No actionable comments were generated in the recent review.
Walkthrough
The pull request updates the pinned commits for the vendor/tinyinference and vendor/tinytools subprojects.
No concrete regression is established. The MongoDB conformance check failed because Cargo requires a lockfile update; its cause should be clarified before relying on that check.
Pre-merge checks: 5
Check name
Status
Explanation
Description Check
Check skipped - CodeRabbit’s high-level summary is enabled.
Title check
The title clearly and concisely describes the main change: updating the tinytools and tinyinference pins to commits containing the security migration.
Docstring Coverage
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check
Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check
Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage
Explanation
No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)
Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts
A rabbit checks each pin, Two vendor paths now point anew. Tinyinference hops ahead, Tinytools follows too. The commit trail is fresh, And the rabbit nibbles on.
CodeRabbit Verify
Run CodeRabbit Verify to test the changes in this pull request.
Recent review info
Run configuration
Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: CHILL
Plan: Advanced
Run ID: cac3edb1-c9ae-4999-9f31-cb4443b049f8
Commits
Reviewing files that changed from the base of the PR and between 1c89a19 and 8c12e4b.
Files ignored due to path filters: 1
Cargo.lock is excluded by !**/*.lock
Files selected for processing: 2
vendor/tinyinference
vendor/tinytools
Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.
The integration proof's lockfile now records the sha2 0.11.1 dependency, keeping it in sync with the crate's manifest.
Auto-committed-on: cuttlefish
Co-authored-by: Medulla <medulla@tinyhumans.ai>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
priority: p3Whenever. Cosmetic, a nicety, or a cleanup with no user visible effect.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![tinysweeper[bot]](https://avatars.githubusercontent.com/in/4526585?s=60&v=4){kind=small}
tinysweeper
Bot
added
the
priority: p3
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Summary
Moves the nested pins to commits on each repo's
main:vendor/tinytools41cc80a → 2905bb2. AddsToolRuleSet::inherit_operator_layers(feat(rules): inherit only operator layers into a sub-agent rule set tinytools#103, fix(tool_calling): stop dropping a GLM tag beside a p-format tag #104).vendor/tinyinferencec2c6a60 → eed817b. Adds async bearer resolvers, async embedding and catalog-limit factories taking owned request structs, credential fingerprints, andCatalogLimitsRequestDebug redaction (Async credential resolution, async provider factories and credential fingerprints tinyinference#144, feat(dialect): honour trusted_verbatim when framing tool results #145).Before #585 and 21ba878, this repo pinned both to
senamakel/*epic/8369-security-migrationcommits that weren't on upstreammain. Moving to upstreammaindropped that work, and hosts that depend on it (OpenHuman's sub-agent rule policy and embedding/catalog factories) stopped compiling against tinyagentsmain. Now that the epic is on both upstream mains, this pins it from there.Cargo.lock: addssha2 0.11.1(the tinyinference credential fingerprint).Public API
None in tinyagents. Downstream hosts get the tinyinference async factory signatures, which is a breaking change for hosts that register overrides.
Validation
cargo fmt --all -- --check: okcargo clippy --workspace --all-targets --all-features -- -D warnings: okcargo check --workspace --all-targets --locked: okcargo test --workspace: okSummary by CodeRabbit