Skip to content

chore(deps): drop dependencies no crate references - #16

Merged
senamakel merged 1 commit into
mainfrom
dep-audit
Sep 19, 2026
Merged

senamakel merged 1 commit into
mainfrom
dep-audit

Conversation

@senamakel

@senamakel senamakel commented Sep 19, 2026

Copy link
Copy Markdown
Member

Summary

Found by the cross-repo dependency audit in tinyhumansai/openhuman#6353 (pnpm dep:audit, tinyanalyzer-driven) and verified by grep against this tree at main. Manifest and lockfile only; no source changes.

  • tinyinference-providers: drop tinyinference-core, tinyinference-llm, tokio, async-trait and dev-dependency tempfile — the crate is auth/OAuth/config-rejection helpers over reqwest/serde and never references any of them.
  • tinyinference-voice: drop log (the crate logs through tracing).
  • tinyinference-llm: drop url (the word only appears in strings and doc comments; no url:: path).

All of these are still pulled in by sibling crates, so this is a manifest clean-up rather than a build-graph reduction — but it stops tinyinference-providers from looking like it depends on the LLM crate.

Related issue

None.

API or behavior changes

None.

Validation

Commands actually run, with their outcome:

  • cargo fmt --all -- --check — clean
  • cargo clippy --workspace --all-targets --all-features -- -D warnings — clean (stable 1.98)
  • cargo check --workspace --all-targets --all-features — clean
  • cargo test --workspace --all-features — 719 passed, 0 failed

Tests

None added: dependency removal is verified by the build, not by a test.

Documentation

Not needed; no public surface changed.

Checklist

  • The change is focused on one logical change
  • No new #[allow(...)], #[ignore], or relaxed lints
  • No secrets, tokens, or .env contents in the diff or the description

Summary by CodeRabbit

  • Chores
    • Streamlined internal dependency declarations across inference, provider, and voice components.
    • Removed unused package references from build and development configuration.

Removed several dependencies that were declared in Cargo.toml files but no longer used in the code, including url from tinyinference-llm, async-trait, tempfile, tinyinference-core, tinyinference-llm, and tokio from tinyinference-providers, and log from tinyinference-voice. This cleans up the dependency tree and reduces unnecessary compilation overhead.

Auto-committed-on: dragonfly
Co-authored-by: Medulla <medulla@tinyhumans.ai>
@tinysweeper

tinysweeper Bot commented Sep 19, 2026

Copy link
Copy Markdown

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: 7fe881f6dd8d
Updated: 1789835674 (Unix time)

Review snapshot

Change surface Files Review signal Count
Production 0 Active findings 0
Tests 0 Noted findings 0
Documentation 0 Resolved findings 0
Configuration 3 Pending checks/questions 0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

security

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

tests

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

commits

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: Nothing sensitive found in what this pull request commits.

description

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

e2e

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.
Evidence and run details
  • Models: ladder/vectors, deepseek-v4-flash
  • Spend: $0.000089
  • Tokens: 1569 input · 1612 output · 0 cached · 130 embedding
Head State Pass summary
7fe881f6dd8d ready for maintainer review 0 active finding(s), 0 resolved finding(s) (at 1789835674)

tinysweeper 0.1.0

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 19, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-19T16:35:58.000880Z 7fe881f PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 646b98c8-d16e-4832-89cb-e9404f2c4782

📥 Commits

Reviewing files that changed from the base of the PR and between 1189cbf and 7fe881f.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (3)
  • crates/tinyinference-llm/Cargo.toml
  • crates/tinyinference-providers/Cargo.toml
  • crates/tinyinference-voice/Cargo.toml
💤 Files with no reviewable changes (3)
  • crates/tinyinference-voice/Cargo.toml
  • crates/tinyinference-providers/Cargo.toml
  • crates/tinyinference-llm/Cargo.toml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

Three Cargo manifests remove dependency declarations. No public entities change.

Changes

Dependency Manifest Cleanup

Layer / File(s) Summary
Manifest dependency cleanup
crates/tinyinference-llm/Cargo.toml, crates/tinyinference-providers/Cargo.toml, crates/tinyinference-voice/Cargo.toml
The manifests remove the specified url, provider, tempfile, and log dependency entries.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly identifies a dependency cleanup and matches the removal of unused crate dependencies.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

A rabbit reads each line,
The patch grows clear beneath the moon,
Small changes hop in place,
Tests guard the garden path,
Reviews bloom before the dawn.

Comment @coderabbitai help to get the list of available commands.

@tinysweeper tinysweeper Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tinysweeper found nothing blocking. Approving.

$0.0001 · 1,569 in / 1,612 out · 0 cached (0%) · 130 embedded · ladder/vectors, deepseek-v4-flash

@senamakel
senamakel merged commit 93acea1 into main Sep 19, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant