chore(deps): bump toml to 1

[senamakel]

Summary

Found by the cross-repo dependency audit in tinyhumansai/openhuman#6353 (pnpm dep:audit, tinyanalyzer-driven). tinybus was the last crate in the OpenHuman build graph on toml 0.8; every host is on toml 1, so the graph compiled toml, toml_datetime, serde_spanned, toml_edit/toml_parser, toml_write/toml_writer and winnow twice. The only use is toml::from_str in crates/tinybus/src/module/github.rs, which is unchanged across the major.

Manifest and lockfile only; no source changes.

API or behavior changes

None.

Validation

• cargo fmt --check — clean
• cargo clippy --workspace --all-targets --all-features -- -D warnings — clean
• cargo check --workspace --all-targets --all-features — clean
• cargo test --workspace --all-features — 336 passed, 0 failed

Summary by CodeRabbit

• Chores
  • Updated the optional TOML support dependency to a newer major version for module-enabled builds.

[tinysweeper]

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: c1f2d597693c
Updated: 1789836220 (Unix time)

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The change updates the optional `toml` dependency to the 1.x release line, which is consistent with the existing lockfile and does not introduce an evident compatibility problem. Safe to merge. _The code index for this repository is cold, so this review saw the diff alone._ _1 memory call(s) failed (model: cortex: v1/answer answered 502 Bad Gateway), so this review saw part of what the engine holds._

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The optional TOML dependency is updated from the 0.8 series to the 1.x series, with no security or authorization impact evident in this manifest-only change. It looks safe to merge. _The code index for this repository is cold, so this review saw the diff alone._ _1 memory call(s) failed (model: cortex: v1/answer answered 502 Bad Gateway), so this review saw part of what the engine holds._

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: Nothing sensitive found in what this pull request commits.

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: This pull request bumps the `toml` dependency from `0.8` to `1` in `crates/tinybus/Cargo.toml`, a compatible version change with no source code modifications. All validation checks pass. It is safe to merge. _The code index for this repository is cold, so this review saw the diff alone._ _1 memory call(s) failed (model: cortex: v1/answer answered 502 Bad Gateway), so this review saw part of what the engine holds._

e2e

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

Evidence and run details

• Models: flash, gpt-5.6-luna, deepseek-v4-flash
• Spend: $0.002878
• Tokens: 49848 input · 4570 output · 6884 cached · 0 embedding

Head	State	Pass summary
c1f2d597693c	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 1789836220)

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 3cf8c973-ec10-417f-9a5b-f02b8918eab1

📥 Commits

Reviewing files that changed from the base of the PR and between d5ce18d and c1f2d59.

⛔ Files ignored due to path filters (1)

• Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• crates/tinybus/Cargo.toml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The pull request updates the optional toml dependency in crates/tinybus/Cargo.toml from version 0.8 to version 1. The dependency remains gated by the modules feature.

Changes

Dependency Update

Layer / File(s)	Summary
TOML dependency requirement crates/tinybus/Cargo.toml	The optional toml dependency now requires version 1 instead of 0.8. The modules feature continues to gate the dependency.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~2 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely describes the main change: upgrading the optional toml dependency to version 1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

---

_{A rabbit reads each line,
The patch grows clear beneath the moon,
Small changes hop in place,
Tests guard the garden path,
Reviews bloom before the dawn.}

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-19T16:37:04.196688Z	c1f2d59	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[tinysweeper]

tinysweeper found nothing blocking. Approving.

             $0.0029 · 49,848 in / 4,570 out · 6,884 cached (14%) · flash, gpt-5.6-luna, deepseek-v4-flash
critique:    $0.0017 · 25,378 in / 900 out   · 2,028 cached (8%)  · gpt-5.6-luna
security:    $0.0008 · 14,036 in / 303 out   · 1,784 cached (13%) · gpt-5.6-luna
description: $0.0001 · 6,819 in  / 266 out   · 1,024 cached (15%) · deepseek-v4-flash