[senamakel]

Version bump for contract 1.10 (#41). Part of tinyhumansai/openhuman#7587, #7539

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-13T09:31:10.790859Z	e1a950c	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[coderabbitai]

Warning

Review limit reached

• Run on-demand review

_{This review includes 2 billable files and costs up to $0.50.}

Or wait 47 minutes for your next included review.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 5873f033-9fa6-4122-a483-2dd44848eafb

📥 Commits

Reviewing files that changed from the base of the PR and between 5f09999 and e1a950c.

⛔ Files ignored due to path filters (2)

• Cargo.lock is excluded by !**/*.lock
• crates/tinyvoice-module/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• crates/tinyvoice-module/Cargo.toml
• crates/tinyvoice/Cargo.toml

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

Tiny Sweeper review

Version-bump-only release change affecting two manifests: tinyvoice and tinyvoice-module move from 0.2.0 to 0.3.0, with the module's path dependency requirement on tinyvoice updated to match. No behavioral, documentation, or test-lane findings were raised, and nothing sensitive was found in the commits. The one open item is a description-lane finding that the committed Cargo.lock was not refreshed, so crates/tinyvoice-module/Cargo.lock still records tinyvoice 0.2.0; because the repository requires Cargo.lock to stay committed for reproducible CI and releases, that lockfile should be regenerated and included.

State: Changes requested
Priority: high
Reviewed head: e1a950cf4bf8
Updated: 2026-10-13T15:47:19Z

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	1
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	2	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

crates/tinyvoice/Cargo.toml bumps the tinyvoice package version from 0.2.0 to 0.3.0. crates/tinyvoice-module/Cargo.toml bumps the tinyvoice-module package version from 0.2.0 to 0.3.0 and updates the path dependency requirement on tinyvoice from version 0.2.0 to 0.3.0 while keeping the capture and hotkey features. The rebuilt Cargo.lock is not included.

Features

• Modified — tinyvoice package version bump to 0.3.0: Advances the published tinyvoice crate version from 0.2.0 to 0.3.0. (crates/tinyvoice/Cargo.toml)
• Modified — tinyvoice-module package version bump to 0.3.0: Advances the tinyvoice-module crate version from 0.2.0 to 0.3.0. (crates/tinyvoice-module/Cargo.toml)
• Modified — tinyvoice path dependency requirement updated to 0.3.0: Keeps the tinyvoice-module dependency on tinyvoice satisfiable by the bumped version, preserving the capture and hotkey feature selection while raising the required version from 0.2.0 to 0.3.0. (crates/tinyvoice-module/Cargo.toml)

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

• high · description · Refresh the committed Cargo.lock for the new tinyvoice version — The dependency requirement moves to `0.3.0`, but the committed lockfile is not updated in this diff: `crates/tinyvoice-module/Cargo.lock` still resolves the workspace crate `tinyvo (\(pull request description\))

Before merge

• Address Refresh the committed Cargo.lock for the new tinyvoice version (\(pull request description\)).

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The critique lane recorded no findings across the two reviewed files.
• Lane summary: Reviewed 2 files; 0 findings.

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The security lane recorded no findings across the two reviewed files.
• Lane summary: Reviewed 2 files; 0 findings.

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Positive: The commits lane found nothing sensitive in what the pull request commits.
• Lane summary: Nothing sensitive found in what this pull request commits.

description

• Conclusion: Failure
• Scope reviewed: all assigned evidence
• Positive: The description-lane finding that the committed Cargo.lock still records tinyvoice 0.2.0 and must be refreshed was retained as reported, with no change in severity.
• Positive: The bump of tinyvoice and tinyvoice-module from 0.2.0 to 0.3.0 and the matching path dependency requirement update match what the pull request description states.
• Lane summary: The change bumps tinyvoice and tinyvoice-module from 0.2.0 to 0.3.0 and updates the path dependency requirement to match, which is what the description says. One thing the description does not mention: the rebuilt Cargo.lock is not included, so crates/tinyvoice-module/Cargo.lock still records tinyvoice 0.2.0 and the repository requires Cargo.lock to stay committed for reproducible CI and releases.
• Evidence: \(pull request description\) — Refresh the committed Cargo.lock for the new tinyvoice version

Evidence and run details

• Models: ladder/vectors-oai3, deepseek-v4.1-flash
• Spend: $0.000240
• Tokens: 102732 input · 3029 output · 29184 cached · 50 embedding

Head	State	Pass summary
e1a950cf4bf8	changes requested	1 active finding(s), 0 resolved finding(s) (at 2026-10-13T15:47:19Z)

[tinysweeper]

Requesting changes: 1 lane(s) blocking, worst finding is high.

Fix or reply to the findings below and push. The next review clears this automatically once they are gone — you should not need to dismiss anything by hand.

             $0.0002 · 102,732 in / 3,029 out · 29,184 cached (28%) · ladder/vectors-oai3, deepseek-v4.1-flash · 50 embedded
critique:    $0.0001 · 58,951 in  / 959 out   · 19,328 cached (33%) · deepseek-v4.1-flash
security:    $0.0000 · 26,767 in  / 233 out   · 3,840 cached (14%)  · deepseek-v4.1-flash
description: $0.0001 · 15,457 in  / 913 out   · 6,016 cached (39%)  · deepseek-v4.1-flash