[senamakel]

Version bump to 0.2.3 after #134 (tinybus 0.3.6, tinystoragedrivers 2.1.1).

Co-authored-by: Medulla medulla@tinyhumans.ai

Summary by CodeRabbit

• Chores
  • Updated the workspace release version to 0.2.3.
  • This update does not include changes to user-facing features or behavior.

[tinysweeper]

Tiny Sweeper review

Reviewed head: 092749ff6378ba966ae8f5fb7177eaf927be318a

Verdict: Ready for maintainer review · Priority: none
Coverage: Reviewed 1 of 2 files; not reviewed: Cargo.lock.
Pull request purpose (title): chore(release): tiny…

Diagnostics and supporting details

Full summary

Pull request purpose (title): chore(release): tinybox 0.2.3. Tiny Sweeper completed its review; deterministic results follow.

Unreviewed paths

• Cargo.lock

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

Only the workspace manifest is updated in the reviewed diff. `Cargo.toml#version = "0.2.2"` becomes `version = "0.2.3"` under `[workspace.package]`, and each entry in `Cargo.toml#members = [` internal path-dependency block advances its pinned version from 0.2.2 to 0.2.3 for tinybox-bus, tinybox-core, tinybox-host, tinybox-jail, tinybox-linux, tinybox-microvm, tinybox-docker, tinybox-ssh, tinybox-sync, and tinybox-drivers. `Cargo.toml#serde_json = "1"` is included in the changed symbol set, while serde and the git-pinned tinystoragedrivers crates remain untouched. Behaviourally this is inert: no dependency ranges widen, no features or lints change, and no source code moves. The practical effect is that workspace members referencing `version.workspace = true` and the bumped path dependencies resolve to the 0.2.3 release, and `Cargo.lock` requires regeneration rather than manual editing, which the pull-request file list reflects.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The change is a mechanical version bump to 0.2.3 across [workspace.package] and every internal path dependency. All 11 workspace members that reference `version.workspace = true` or the bumped path deps pick up the new version consistently, and the Cargo.lock entries still showing 0.2.2 are regenerated by cargo rather than checked in this diff. One thing I could not verify: `crates/tinybox-bin/Cargo.toml` pins `tinybox-cli = { path = "../tinybox-cli", version = "0.1.25" }`, which is unrelated to this bump, so it is neither broken nor fixed by it. _The code index is behind this pull request (indexed at `31ed7dcbff60`), so retrieved context may be out of date._

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: This is a pure version bump from 0.2.2 to 0.2.3 in the workspace manifest, updating the `[workspace.package]` version and every internal `[workspace.dependencies]` path-dependency version to match. No dependencies, features, lints, network access, or code paths change, so there is nothing security-relevant or behaviour-changing to report. I checked the cross-references in the workspace: the only file that pins a different literal version is `crates/tinybox-bin/Cargo.toml`, which requires `tinybox-cli = { path = "../tinybox-cli", version = "0.1.25" }` — that crate is not one of the entries this diff bumps and it uses `workspace = true` for its own version, so no manifest is left with a mismatched version requirement. The workspace-level lints, the git-pinned tinystoragedrivers crates, and the feature sets are all untouched. _The code index is behind this pull request (indexed at `31ed7dcbff60`), so retrieved context may be out of date._

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `31ed7dcbff60`), so retrieved context may be out of date._

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: Pure version bump from 0.2.2 to 0.2.3 in the workspace package version and the internal path-dependency pins, matching the PR description (the tinystoragedrivers/tinybus pins were already at their stated versions). The diff is internally consistent and the files listed in the bump all use version.workspace = true, so nothing else needs editing; the Cargo.lock 0.2.2 hits I checked are registry crates, not workspace members. _The code index is behind this pull request (indexed at `31ed7dcbff60`), so retrieved context may be out of date._

Evidence and run details

• Models: ladder/vectors-oai3, deepseek-v4.1-flash
• Spend: $0.001000
• Tokens: 100707 input · 3221 output · 21504 cached · 43 embedding
• Updated: 2026-10-26T09:03:56Z

Head	State	Pass summary
092749ff6378	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 2026-10-26T09:03:56Z)

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 64e76ec0-7df1-4ba5-a66f-7bbaff0896cb

Commits

Reviewing files that changed from the base of the PR and between e617f30 and 092749f.

Files ignored due to path filters: 1

• Cargo.lock is excluded by !**/*.lock

Files selected for processing: 1

• Cargo.toml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The workspace package version changes from 0.2.2 to 0.2.3. The internal Tinybox path dependencies, including tinybox-drivers, also change to version 0.2.3. TinyStorageDrivers dependency pins remain unchanged.

Changes: Version alignment

Layer / File(s)	Summary
Update manifest versions Cargo.toml	The workspace package and internal Tinybox path dependencies change from version 0.2.2 to 0.2.3.

Priority: Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Possibly related issues

• Tracker: security, policy, approvals and sandboxing onto tinysecurity + tinybox (file-by-file migration epic) openhuman#8369: This version update follows internal dependency updates, which provides release context for the upstream-component adoption described in the issue.
• Make tinybox sandbox-only: capability honesty, resource limits, network policy, events, bus contract (Linux/macOS/Windows) #27: The manifest version bump aligns Tinybox versions, but the provided change summary does not show a published release or the sandbox changes described in the issue.

Possibly related PRs

• tinyhumansai/tinybox#134: That PR updates dependencies; this PR updates the Tinybox package and internal dependency versions afterward.

Suggested reviewers: m3ga-mind

Merge Risk: Minimal · up to 09274

No actionable merge-blocking risk was identified in the version alignment changes.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the release version bump to tinybox 0.2.3, which matches the main change.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{A rabbit checks the manifest line,
And hops from two-point-two to three.
The Tinybox crates now match their tag,
While storage pins stay as they be.
One neat version, snug as can be.}

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-26T09:04:24.475517Z	092749f	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[tinysweeper]

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0010