[senamakel]

Bumps nested vendor/tinybus to v0.3.6 (6ce06bc), widens the tinybus/tinybus-module requirement to >=0.3.6,<0.4, and pins tinystoragedrivers to v2.1.1 (bf1f0a9). No code changes needed; clippy -D warnings, rustdoc -D warnings, fmt, nextest (728) and doctests pass locally.

Summary by CodeRabbit

• Chores
  • Updated the underlying messaging and storage components to newer versions. No user-facing feature changes are included in this update.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-26T06:24:50.617232Z	c41026d	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: bf68e448-96c3-44a0-bf6c-23b804fff5f0

Commits

Reviewing files that changed from the base of the PR and between ccdfba2 and c41026d.

Files ignored due to path filters: 1

• Cargo.lock is excluded by !**/*.lock

Files selected for processing: 2

• Cargo.toml
• vendor/tinybus

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The workspace updates the accepted versions of tinybus and tinybus-module, pins four tinystoragedrivers Git dependencies to a new revision, and advances the vendor/tinybus submodule reference.

Changes: Dependency updates

Layer / File(s)	Summary
Dependency requirements and revisions Cargo.toml, vendor/tinybus	The tinybus and tinybus-module requirements change to >=0.3.6, <0.4. The four tinystoragedrivers Git dependencies use a new pinned revision. The vendor/tinybus submodule points to a new commit.

Priority: Low

Estimated code review effort: 2 (Simple) | ~8 minutes

Change: Other

Possibly related PRs

• tinyhumansai/tinyconnectors#92: Changes the same vendor/tinybus submodule pointer and begins the TinyBus version-line update continued here.

Suggested reviewers: m3ga-mind

Merge Risk: Minimal · up to c4102

The dependency update has no identified merge-blocking issue; it is mergeable after normal checks.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly and concisely describes the dependency updates to tinybus v0.3.6 and tinystoragedrivers v2.1.1.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (2 skipped: 2 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{A rabbit checks the version line,
New pins and commits fit just fine.
TinyBus hops to newer ground,
Storagedrivers move around.
The burrow builds, all neat in line.}

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

Tiny Sweeper review

Reviewed head: c41026d752a6ee7c4bd4430c4084b2d385050813

Verdict: Ready for maintainer review · Priority: none
Coverage: Reviewed 1 of 3 files; not reviewed: Cargo.lock, vendor/tinybus.
Pull request purpose (title): chore: bump tinybus…

Diagnostics and supporting details

Full summary

Pull request purpose (title): chore: bump tinybus to v0.3.6 and tinystoragedrivers to v2.1.1. This pull request is a dependency-version bump in the workspace manifest. Per the title and description, it bumps the nested vendor/tinybus to v0.3.6 (6ce06bc), widens the tinybus/tinybus-module requirement to >=0.3.6,<0.4, and pins tinystoragedrivers to v2.1.1 (bf1f0a9), claiming no code changes are needed. In the manifest, the TinyBus dependency moves from >=0.1.3,<0.2 to >=0.3.6,<0.4 while keeping default-features = false and the same macros/modules features, the tinybus-module entry moves to the matching range, and the five tinystoragedrivers git dependencies are repinned from 05eaada9 to bf1f0a97 on the same repository. Critique and security lanes answered with no defects found, describing this as a routine pin update with no new dependency, widened feature, or permission change; both noted they could not read vendor/tinybus to confirm API compatibility, leaving that to the build. The commits and description lanes answered with no issues.

Unreviewed paths

• Cargo.lock
• vendor/tinybus

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The manifest at Cargo.toml moves tinybus to the >=0.3.6, <0.4 range with the same default-features = false and macros/modules features, and tinybus-module to the same range, replacing the prior >=0.1.3, <0.2 requirements. All five tinystoragedrivers git dependencies (types, api, busproxy, testkit and one more) are repinned from rev 05eaada962decbab33bafa4763d2bd1a67f6b456 to rev bf1f0a97fbe6165a6edd9521659c7f6859700761 on the same https://github.com/tinyhumansai/tinystoragedrivers repository. The description states these align with vendor/tinybus v0.3.6 and tinystoragedrivers v2.1.1, with no code changes required.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The change bumps the tinybus/tinybus-module version ranges to `>=0.3.6, <0.4` and moves all five tinystoragedrivers git dependencies to a single new rev, and `Cargo.lock` in the tree already records the new rev and the 2.1.1 versions, so the lockfile and manifest agree. I found no defect in this diff; I could not verify that tinybus 0.3.x keeps the APIs the module crate uses, since the `vendor/tinybus` submodule is not readable in this deployment, so that compatibility rests on CI rather than on anything I checked. _The code index is behind this pull request (indexed at `f96fcdb08bb6`), so retrieved context may be out of date._

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: This is a dependency-version bump in the root `Cargo.toml`: TinyBus moves from `>=0.1.3, <0.2` to `>=0.3.6, <0.4` (still a caret-style range, still `default-features = false` with the same two features), and four git dependencies are repinned from one commit to another on the same repository. No new dependency is introduced, no feature is widened, no permissions or CI configuration change, and nothing here parses untrusted input. The new revisions point at the same owner/repo as before, so this is a routine pin update. I could not read `vendor/tinybus` from this deployment, so I cannot confirm the 0.3.x API still matches the crate's usage — that is left to the build, which would fail loudly rather than silently. _The code index is behind this pull request (indexed at `f96fcdb08bb6`), so retrieved context may be out of date._

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The answered commits lane found no sensitive content in committed files.
• Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `f96fcdb08bb6`), so retrieved context may be out of date._

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The description accurately matches the diff: it bumps the nested tinybus/tinybus-module version requirements to >=0.3.6,<0.4 and repins the four tinystoragedrivers git dependencies to rev bf1f0a97..., with no code changes claimed and none shown. I found nothing in the diff that the description omits or misstates. _The code index is behind this pull request (indexed at `f96fcdb08bb6`), so retrieved context may be out of date._

Evidence and run details

• Models: ladder/vectors-oai3, deepseek-v4.1-flash
• Spend: $0.000237
• Tokens: 147266 input · 4117 output · 26112 cached · 127 embedding
• Updated: 2026-10-26T06:24:46Z

Head	State	Pass summary
c41026d752a6	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 2026-10-26T06:24:46Z)

[tinysweeper]

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0002