[M3gA-Mind]

Summary

• Bumps the workspace version from 0.1.39 to 0.1.40, ready for the v0.1.40 tag. It follows the same pattern as chore(release): 0.1.39 #138.
• Changes Cargo.toml [workspace.package] version and the four workspace-crate entries in Cargo.lock: tinychannels, -bus, -module and -runtime. No dependency changes.

Included since v0.1.39

• feat(channels): add backwards-compatible typed adapter seams #140 typed adapter seams
• feat(bus): publish typed controller and approval contracts #141 typed controller and approval contracts published on the bus
• build: pin TSD busproxy to v2.1 #142 busproxy pinned to v2.1 (same rev)
• fix(delivery): one bad pending entry no longer blocks the queue #143 poisoned pending queue fix
• feat(runtime): add web chat adapter on current bus contracts #144 web chat adapter
• fix(telegram): advance the poll offset past deduplicated updates #148 telegram offset advances past deduplicated updates
• test(security): pin single-use pairing codes and wrong-code refusal #149 pairing-code tests
• fix(deps): bump ctutils to 0.4.4 for RUSTSEC-2026-0385 #151 ctutils 0.4.4 for RUSTSEC-2026-0385

The new public bus API comes from additive feat merges, so the version choice is a maintainer call: this PR takes patch, per the release request, and 0.2.0 is the alternative. Nothing public is removed. MSRV (1.94), the tinybus gitlink and the tinystoragedrivers rev are unchanged.

Test plan

• Full checks off-GitHub on the cuttlefish check host.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 57861d9b-a473-4bbb-b68d-beba9853663b

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

Tiny Sweeper review

Reviewed head: d97b35d1532e72ddb0382b816adf100bc6795e76

Verdict: Ready for maintainer review · Priority: none
Coverage: Reviewed 1 of 2 files; not reviewed: Cargo.lock.
Pull request purpose (title): chore(release): 0.1.…

Diagnostics and supporting details

Full summary

Pull request purpose (title): chore(release): 0.1.40. Release PR titled "chore(release): 0.1.40" bumps the sole workspace version from 0.1.39 to 0.1.40 in the root Cargo.toml, ready for the v0.1.40 tag; Cargo.lock carries the matching workspace-crate version entries, and no dependency changes are included. The latest-push delta is unavailable, so this summary describes the whole pull request, not a per-push comparison.

Unreviewed paths

• Cargo.lock

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The change sets the workspace version to 0.1.40 in Cargo.toml, consistent with the comment that releases update the sole workspace version before packaging every crate; the description states Cargo.lock receives matching 0.1.40 entries for tinychannels, tinychannels-bus, tinychannels-module and tinychannels-runtime via version.workspace. The description lists included changes since v0.1.39 (typed adapter seams, typed controller and approval contracts on the bus, busproxy pinned to v2.1 at the same rev, a poisoned pending queue fix, a web chat adapter, telegram offset advancing past deduplicated updates, pairing-code tests, and ctutils 0.4.4 for RUSTSEC-2026-0385) and notes MSRV 1.94, the tinybus gitlink and the tinystoragedrivers rev are unchanged. Only the Cargo.toml workspace.version line appears in the supplied diff; other claims rest on the pull-request description, not on supplied diff evidence.

Features

• Modified — Workspace version bump to 0.1.40: Updates the single inherited workspace version used at release packaging time; per the description this carries into the four workspace-crate entries in Cargo.lock. No dependency, feature, MSRV or gitlink changes are reported. (Cargo.toml, Cargo.toml tinybus = { path = "vendor/tinybus/crates/tinybus" })

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The critique lane answered with no defects, noting the version bump matches the Cargo.toml comment about releasing the sole workspace version; the only unverified item is whether another manifest or artifact pins the old version string.
• Lane summary: The diff is a single-line workspace version bump from 0.1.39 to 0.1.40 in the root Cargo.toml, consistent with the comment stating releases update the sole workspace version before packaging. No defects to report; the only thing I could not verify is whether any other manifest or artifact pins the old version string, but nothing in this file makes that assumption wrong. _The code index is behind this pull request (indexed at `39e79dfabdc0`), so retrieved context may be out of date._

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The security lane answered with nothing to report: no dependency, feature, build or security-relevant change.
• Lane summary: A single-line workspace version bump from 0.1.39 to 0.1.40; no dependency, feature, build, or security-relevant change. Nothing to report. _The code index is behind this pull request (indexed at `39e79dfabdc0`), so retrieved context may be out of date._

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The commits lane answered reporting no sensitive content in committed files.
• Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `39e79dfabdc0`), so retrieved context may be out of date._

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The description lane answered that the description matches the diff and the release note is accurate, and considered the change safe to merge.
• Lane summary: The diff bumps the workspace version from 0.1.39 to 0.1.40 in Cargo.toml, and Cargo.lock already carries the matching 0.1.40 entries for tinychannels and, via version.workspace, the three workspace crates; no other changes are included. The description matches the diff and the release note is accurate, so the change is safe to merge. _The code index is behind this pull request (indexed at `39e79dfabdc0`), so retrieved context may be out of date._

Evidence and run details

• Models: ladder/vectors-oai3, deepseek-v4.1-flash
• Spend: $0.000195
• Tokens: 70795 input · 1711 output · 13824 cached · 33 embedding
• Updated: 2026-10-23T13:13:20Z

Head	State	Pass summary
d97b35d1532e	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 2026-10-23T13:13:20Z)

[tinysweeper]

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0002