build(deps): pin openhuman at 9aebda6e57 with tinymcp v0.4.0 and tinyskills v0.2.8

[oxoxDev]

Summary

• Moves the OpenHuman pin from cbde5069de to 9aebda6e57 (current main, after #7054 and #7058).
• That OpenHuman carries tinymcp v0.4.0, tinyskills v0.2.8 and tinymemory 1.23.4, so the tinymemory-api / tinymemory-tools revs move to 581a2bc (v1.23.4) to match.
• vendor/openhuman, the Cargo.toml revs and both lockfiles move together; assert-openhuman-pin.sh passes on all six revs. tinytools is unchanged at 8e5008c.

Why

OpenCompany vendors TinyHiveMind and builds it against its own vendor/openhuman. Its root [patch] hid that this repo still pinned the older OpenHuman and tinymemory. This brings the pins in line, so a consumer without that patch builds the same tree. Part of moving OpenCompany's skills and MCP onto tinyskills and tinymcp (tinyhumansai/opencompany#2576).

Validation

• cargo fmt --all -- --check
• cargo build --all-targets --all-features
• cargo clippy --all-targets --all-features -- -D warnings
• cargo test and cargo test --all-features
• cargo test --locked --manifest-path examples/openhuman/Cargo.toml
• cargo doc --no-deps --all-features
• sh .github/scripts/assert-openhuman-pin.sh

No source changes were needed.

Summary by CodeRabbit

• Chores
  • Updated several underlying components to newer revisions. These updates may affect how the application’s integrated capabilities behave, but no specific user-facing changes or new functionality are described in this release. No changes to the application’s public features are noted.

[tinysweeper]

Tiny Sweeper review

Tiny Sweeper reviewed this change across 6 lane(s) and found 0 active actionable finding(s). Detailed lane evidence and any incomplete work are listed below.

State: Ready for maintainer review
Priority: none
Reviewed head: 9e845e2f250a
Updated: 1791364426 (Unix time)

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

The review could not produce a supported behavioral summary; inspect the cited changed surface and lane details below.

Features

None identified with supported citations.

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The change updates the pinned OpenHuman and tinymemory revisions consistently in the workspace manifest, and no correctness issue is evident from the provided diff. It appears safe to merge. _Code retrieval was unavailable (model: ladder embeddings returned 400 Bad Request: {"error":{"message":"unknown ladder vectors; known ladders are flash (also chat-v1, flash-v1), instant (also no-think, instant-v1), reasoning (also deepseek), max-reasoning (also max-reasoning-v1), deepseek-flash (also reasoning-v1, agentic-v1), deep (also luna), scribe, uncensored, vectors-oai3 (also embeddings-oai3-v1), vision (also vision-v1, multimodal-v1), image (also images-v1, image-v1), vi), so this review saw the diff alone._ _Memory was unavailable (model: cortex: v1/recall: error sending request for url (http://cortexdb:3141/v1/recall\)\), so this review ran without it._

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The change updates the pinned OpenHuman and tinymemory git revisions while retaining exact revision pins and disabled default features. No security issue is evident in the changed manifest entries. _Code retrieval was unavailable (model: ladder embeddings returned 400 Bad Request: {"error":{"message":"unknown ladder vectors; known ladders are flash (also chat-v1, flash-v1), instant (also no-think, instant-v1), reasoning (also deepseek), max-reasoning (also max-reasoning-v1), deepseek-flash (also reasoning-v1, agentic-v1), deep (also luna), scribe, uncensored, vectors-oai3 (also embeddings-oai3-v1), vision (also vision-v1, multimodal-v1), image (also images-v1, image-v1), vi), so this review saw the diff alone._ _Memory was unavailable (model: cortex: v1/recall: error sending request for url (http://cortexdb:3141/v1/recall\)\), so this review ran without it._

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: Nothing sensitive found in what this pull request commits.

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Lane summary: The change is a dependency pin bump matching its description: openhuman and tinymemory revs move to the commits named in the body, tinytools is untouched, and the comment blocks stay accurate. The description matches the diff; looks safe to merge. _Code retrieval was unavailable (model: ladder embeddings returned 400 Bad Request: {"error":{"message":"unknown ladder vectors; known ladders are flash (also chat-v1, flash-v1), instant (also no-think, instant-v1), reasoning (also deepseek), max-reasoning (also max-reasoning-v1), deepseek-flash (also reasoning-v1, agentic-v1), deep (also luna), scribe, uncensored, vectors-oai3 (also embeddings-oai3-v1), vision (also vision-v1, multimodal-v1), image (also images-v1, image-v1), vi), so this review saw the diff alone._ _Memory was unavailable (model: cortex: v1/recall: error sending request for url (http://cortexdb:3141/v1/recall\)\), so this review ran without it._

e2e

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

Evidence and run details

• Models: gpt-5.6-luna, glm-5.3-flash
• Spend: $0.001853
• Tokens: 38476 input · 2559 output · 3864 cached · 0 embedding

Head	State	Pass summary
9e845e2f250a	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 1791364426)

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 831323bc-ba86-46bc-aad3-00b6850c50e6

📥 Commits

Reviewing files that changed from the base of the PR and between fe3a3cd and 9e845e2.

⛔ Files ignored due to path filters (2)

• Cargo.lock is excluded by !**/*.lock
• examples/openhuman/Cargo.lock is excluded by !**/*.lock

📒 Files selected for processing (2)

• Cargo.toml
• vendor/openhuman

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The manifest now pins OpenHuman and Tinymemory to updated Git revisions. The vendor/openhuman submodule pointer now matches the updated OpenHuman revision.

Changes

Dependency Revision Updates

Layer / File(s)	Summary
Update dependency revisions Cargo.toml, vendor/openhuman	The OpenHuman and Tinymemory dependency pins changed. The OpenHuman submodule pointer changed to the same revision as the OpenHuman dependency pins.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: senamakel

Merge Risk: ⚪ Minimal · up to 9e845

This change advances dependency pins, and the OpenHuman and Tinymemory revisions are aligned. No concrete merge-blocking regression is established; proceed with normal merge checks.

Architecture Summary

Architecture risk: 🔵 Low · up to 9e845

The change affects 1 system.

Changed systems: Cargo.toml

Architecture concerns
No architecture-level concerns identified.

Review details

Systems and components

• observed — Cargo.toml (service) was modified; 1 changed file maps to changed impact.

Before / after behavior

• observed — Modified behavior in Cargo.toml: The Git revision for both OpenHuman dependencies changed from cbde5069dec828c117131ee75f9d2bbeb5bda02b to 9aebda6e5746d6a0030b5239b1e022b4a9ab45ec; their source URLs and disabled default features are unchanged.
• observed — Modified behavior in Cargo.toml: The Git revision for both Tinymemory dependencies changed from 4b1832311fce41152ce143e7ce209e62f82c6add to 581a2bc853467d77f4b76debb3066524a4a46142; their source URLs are unchanged.
• observed — Modified behavior in vendor/openhuman: The vendor/openhuman submodule pointer now references commit 9aebda6e5746d6a0030b5239b1e022b4a9ab45ec instead of cbde5069dec828c117131ee75f9d2bbeb5bda02b.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the OpenHuman pin update and names the related tinymcp and tinyskills versions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{A rabbit checks the pins at dawn
OpenHuman hops to revisions new
Tinymemory follows along
The vendor pointer joins the queue
Then off through fields of code we bound}

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

tinysweeper found nothing blocking. Approving.

             $0.0019 · 38,476 in / 2,559 out · 3,864 cached (10%) · gpt-5.6-luna, glm-5.3-flash
critique:    $0.0012 · 20,666 in / 1,343 out · 2,022 cached (10%) · gpt-5.6-luna
security:    $0.0006 · 11,066 in / 465 out   · 1,778 cached (16%) · gpt-5.6-luna
description: $0.0000 · 4,238 in  / 99 out    · 0 cached (0%)      · glm-5.3-flash