Skip to content

chore(deps): drop unused anyhow dependency - #17

Merged
senamakel merged 2 commits into
mainfrom
dep-audit
Sep 19, 2026
Merged

senamakel merged 2 commits into
mainfrom
dep-audit

Conversation

@senamakel

@senamakel senamakel commented Sep 19, 2026

Copy link
Copy Markdown
Member

Summary

Found by the cross-repo dependency audit in tinyhumansai/openhuman#6353 (pnpm dep:audit, tinyanalyzer-driven) and verified by grep against this tree at main. Manifest and lockfile only; no source changes.

  • tinymcp: drop anyhow — no anyhow:: path or use anyhow anywhere in the crate (its public boundary already returns the crate Error), so the workspace entry goes too. One crate leaves the build graph.

Related issue

None.

API or behavior changes

None.

Validation

Commands actually run, with their outcome:

  • cargo fmt --all -- --check — clean
  • cargo clippy --workspace --all-targets --all-features -- -D warnings — clean (on stable 1.98; the repo's #[allow(clippy::unused_async_trait_impl)] is unknown to 1.96 and earlier)
  • cargo check --workspace --all-targets --all-features — clean
  • cargo test --workspace --all-features — 862 passed, 0 failed

Tests

None added: dependency removal is verified by the build, not by a test.

Documentation

Not needed; no public surface changed.

Checklist

  • The change is focused on one logical change
  • No new #[allow(...)], #[ignore], or relaxed lints
  • No secrets, tokens, or .env contents in the diff or the description

Summary by CodeRabbit

  • Chores
    • Removed an unused internal dependency from the project configuration.

Co-authored-by: Medulla <medulla@tinyhumans.ai>
@tinysweeper

tinysweeper Bot commented Sep 19, 2026

Copy link
Copy Markdown

Tiny Sweeper review

Pull request removes the unused anyhow dependency from two Cargo.toml files. All review lanes reported no active findings.

State: Ready for maintainer review
Priority: none
Reviewed head: 9d5f9cf0967b
Updated: 1789837701 (Unix time)

Review snapshot

Change surface Files Review signal Count
Production 0 Active findings 0
Tests 0 Noted findings 0
Documentation 0 Resolved findings 0
Configuration 2 Pending checks/questions 0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

Removed the `anyhow = "1"` line from the root `Cargo.toml` and `anyhow = { workspace = true }` from `crates/tinymcp/Cargo.toml`.

Features

  • Removed — unused anyhow dependency: Reduces compile time and dependency tree by removing an unused crate. (Cargo.toml, crates/tinymcp/Cargo.toml)

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

security

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

tests

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

commits

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: Nothing sensitive found in what this pull request commits.

description

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.

e2e

  • Conclusion: Neutral
  • Scope reviewed: all assigned evidence
  • Lane summary: No added or modified lines to review.
Evidence and run details
  • Models: ladder/vectors, deepseek-v4-flash
  • Spend: $0.000067
  • Tokens: 1454 input · 1090 output · 0 cached · 74 embedding
Head State Pass summary
7dd00d74e96b ready for maintainer review 0 active finding(s), 0 resolved finding(s) (at 1789835404)
9d5f9cf0967b ready for maintainer review 0 active finding(s), 0 resolved finding(s) (at 1789837701)

tinysweeper 0.1.0

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 19, 2026

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review Completed 2026-09-19T16:30:48.310170Z 7dd00d7 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@coderabbitai

coderabbitai Bot commented Sep 19, 2026

Copy link
Copy Markdown

Review Change StackReview Change Stack

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: ca9d2cb5-5223-4dc2-aa65-1d7c9da26380

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 2934eeb5-1cea-4db5-b612-f72c736763ec

📥 Commits

Reviewing files that changed from the base of the PR and between d3e4561 and 7dd00d7.

⛔ Files ignored due to path filters (1)
  • Cargo.lock is excluded by !**/*.lock
📒 Files selected for processing (2)
  • Cargo.toml
  • crates/tinymcp/Cargo.toml
💤 Files with no reviewable changes (2)
  • Cargo.toml
  • crates/tinymcp/Cargo.toml

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.


📝 Walkthrough

Walkthrough

The pull request removes the anyhow dependency from the workspace manifest and the tinymcp crate manifest. No public entity declarations change.

Changes

Dependency Cleanup

Layer / File(s) Summary
Remove anyhow declarations
Cargo.toml, crates/tinymcp/Cargo.toml
The workspace and tinymcp manifests no longer declare anyhow.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the removal of the unused anyhow dependency, which is the main change in the pull request.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Commit to this branch
  • Create a new PR

A rabbit checks the manifest with care
No anyhow entries remain there
The workspace is light
The crate is just right
Clean cargo paths hop through the air

Comment @coderabbitai help to get the list of available commands.

@tinysweeper tinysweeper Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tinysweeper found nothing blocking. Approving.

$0.0002 · 5,809 in / 2,710 out · 0 cached (0%) · flash, deepseek-v4-flash

Update the rustls dependency from version 0.23.43 to 0.23.45 and the rustls-webpki dependency from 0.103.13 to 0.103.15 in the lockfile to pick up the latest patch releases.

Auto-committed-on: dragonfly
Co-authored-by: Medulla <medulla@tinyhumans.ai>
@senamakel
senamakel merged commit 559e08a into main Sep 19, 2026
16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant