Skip to content

chore(deps): drop unused dependencies and bump dirs to 6 - #165

Merged
senamakel merged 1 commit into
mainfrom
dep-audit
Sep 19, 2026
Merged

senamakel merged 1 commit into
mainfrom
dep-audit

Conversation

@senamakel

@senamakel senamakel commented Sep 19, 2026

Copy link
Copy Markdown
Member

Summary

Found by the cross-repo dependency audit in tinyhumansai/openhuman#6353 (pnpm dep:audit, tinyanalyzer-driven), verified by grep against this tree at main:

  • tinyagents-registry: drop tinyagents-graph — no source in the crate references it; it was only mentioned by the tracing feature forward, which now forwards to the harness alone.
  • tinyagents-graph: drop reqwest, sha2, chrono — declared but never referenced (chrono only appears in a doc comment).
  • tinyagents-definition: drop dev-dependency serde_json.
  • tinyagents-harness: drop bytes (the word only appears in comments); bump dirs 5 → 6, which also removes thiserror 1.x and the windows-* 0.48 family from the lockfile and lets openhuman (already on dirs 6) stop compiling both.

No source changes; manifest and lockfile only.

API Or Behavior Changes

None. The tinyagents-registry/tracing feature still enables tracing in the harness; it no longer names tinyagents-graph, which the registry never depended on in code.

Tests

  • cargo fmt --check
  • cargo clippy --all-targets -- -D warnings (via --workspace)
  • cargo clippy --all-targets --all-features -- -D warnings
  • cargo build --all-targets (cargo check --workspace --all-targets)
  • cargo build --all-targets --all-features (cargo check --workspace --all-targets --all-features)
  • cargo test (covered by the all-features run)
  • cargo test --workspace --all-features — all suites green (1061 tests in the largest crate)

Documentation

Not needed: no public surface or behaviour changed.

Upgrade the `dirs` crate from v5 to v6 and consolidate all `thiserror` references to the v2.x line, removing the stale v1.x entries from the lock file. Also drop several unused dependencies across the workspace, including `serde_json` from tinyagents-definition, `chrono`, `reqwest`, and `sha2` from tinyagents-graph, `bytes` from tinyagents-harness, and `tinyagents-graph` from tinyagents-registry, along with the associated `windows-sys 0.48` targets that are no longer needed.

Auto-committed-on: dragonfly
Co-authored-by: Medulla <medulla@tinyhumans.ai>
@tinysweeper

tinysweeper Bot commented Sep 19, 2026

Copy link
Copy Markdown

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: e9037eeb6c29
Updated: 1789834812 (Unix time)

Review snapshot

Change surface Files Review signal Count
Production 0 Active findings 0
Tests 0 Noted findings 0
Documentation 0 Resolved findings 0
Configuration 4 Pending checks/questions 0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Lane summary: Reviewed 2 files; 0 findings. _The code index is behind this pull request (indexed at `50ef4b96c82f`), so retrieved context may be out of date._ _3 memory call(s) failed (model: cortex: v1/answer answered 502 Bad Gateway), so this review saw part of what the engine holds._

security

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Lane summary: Reviewed 2 files; 0 findings. _The code index is behind this pull request (indexed at `50ef4b96c82f`), so retrieved context may be out of date._ _3 memory call(s) failed (model: cortex: v1/answer answered 502 Bad Gateway), so this review saw part of what the engine holds._

tests

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: Nothing sensitive found in what this pull request commits.

description

  • Conclusion: Success
  • Scope reviewed: all assigned evidence
  • Lane summary: Cleanly removes unused dependencies and bumps `dirs` without source changes; all checks pass. _The code index is behind this pull request (indexed at `50ef4b96c82f`), so retrieved context may be out of date._ _3 memory call(s) failed (model: cortex: v1/answer answered 502 Bad Gateway), so this review saw part of what the engine holds._

e2e

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No behavioural change: nothing outside documentation, configuration and tests.
Evidence and run details
  • Models: ladder/vectors, gpt-5.6-luna, deepseek-v4-flash
  • Spend: $0.008239
  • Tokens: 136429 input · 6131 output · 8656 cached · 191 embedding
Head State Pass summary
e9037eeb6c29 ready for maintainer review 0 active finding(s), 0 resolved finding(s) (at 1789834812)

tinysweeper 0.1.0

@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown

Warning

Review paused — included plan limit reached

Keep your review moving with free on-demand reviews.

  • Run this review for free

On-demand reviews are free for one more day.

Promotion and pricing details

On-demand reviews are free for one more day. After that, they cost $0.25 per reviewed file.

Review limit details

Or wait 32 minutes for your next included review.

Check out review usage here.

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 5ba0b09a-a2cf-4b5f-a071-b63f315b679c

📥 Commits

Reviewing files that changed from the base of the PR and between e0fea72 and e9037ee.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (4)
  • crates/tinyagents-definition/Cargo.toml
  • crates/tinyagents-graph/Cargo.toml
  • crates/tinyagents-harness/Cargo.toml
  • crates/tinyagents-registry/Cargo.toml

Comment @coderabbitai help to get the list of available commands.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 19, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-19T16:21:06.237580Z e9037ee PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@tinysweeper tinysweeper Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tinysweeper found nothing blocking. Approving.

             $0.0082 · 136,429 in / 6,131 out · 8,656 cached (6%)  · ladder/vectors, gpt-5.6-luna, deepseek-v4-flash · 191 embedded
critique:    $0.0040 · 63,861 in  / 873 out   · 4,060 cached (6%)  · gpt-5.6-luna
security:    $0.0040 · 63,237 in  / 943 out   · 3,572 cached (6%)  · gpt-5.6-luna
description: $0.0002 · 7,033 in   / 1,450 out · 1,024 cached (15%) · deepseek-v4-flash

@tinysweeper tinysweeper Bot added the priority: p3 Whenever. Cosmetic, a nicety, or a cleanup with no user visible effect. label Sep 19, 2026
@senamakel
senamakel merged commit d2b3510 into main Sep 19, 2026
10 checks passed
@senamakel
senamakel deleted the dep-audit branch September 19, 2026 18:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

priority: p3 Whenever. Cosmetic, a nicety, or a cleanup with no user visible effect.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant