[senamakel]

Version bump to 0.2.4 after #136 (the tinybox-openshell backend), #137 (zstd 0.14.3 for RUSTSEC-2026-0391/0398/0403) and #138 (the module serves openshell for Create and Exec).

Changes only the workspace and internal crate versions in Cargo.toml and Cargo.lock. No behavior change. cargo build --all-targets --all-features passes.

After merge, tag v0.2.4 on the merge commit to run release.yml. OpenHuman's tinybox module record (records_extra.rs) then moves to the new archives and checksums.

Co-authored-by: Medulla medulla@tinyhumans.ai

Summary by CodeRabbit

• Chores
  • Updated the workspace release version to 0.2.4. This release updates version metadata; no user-facing feature changes are included in this update.

[tinysweeper]

Tiny Sweeper review

Reviewed head: 86236c51165ef4ad53c620b18b5f18a178346017

Verdict: Ready for maintainer review · Priority: none
Coverage: Reviewed 1 of 2 files; not reviewed: Cargo.lock.
Pull request purpose (title): chore(release): tiny…

Diagnostics and supporting details

Full summary

Pull request purpose (title): chore(release): tinybox 0.2.4. This is a pure release version bump to tinybox 0.2.4, moving the workspace package version and every internal path-dependency version constraint in lockstep from 0.2.3 to 0.2.4 in `Cargo.toml`, with matching updates in `Cargo.lock`. No inter-crate version mismatch is introduced, and the pinned tinystoragedrivers git dependencies are untouched. No defects, tests, or blocked items are reported. The latest-push delta is unavailable: the review state has the prior reviewed head and rendered evidence, but no trusted base-to-head diff comparison exists, so cached prompt differences are not treated as a proven push delta.

Unreviewed paths

• Cargo.lock

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	1	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

Features

• Modified — Workspace package version bump to 0.2.4: Moves the shared `[workspace.package]` version from "0.2.3" to "0.2.4", so every member manifest using `version.workspace = true` resolves to the new release version. (Cargo.toml members = [)
• Modified — Internal tinybox-* path dependency versions move in lockstep: All eleven internal path dependencies (bus, core, host, jail, linux, microvm, docker, openshell, ssh, sync, drivers) move from `version = "0.2.3"` to `version = "0.2.4"` together, so no member references a stale 0.2.3 and no inter-crate version mismatch is introduced. (Cargo.toml members = [)

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: Answered with no findings: the version bump is lockstep across the workspace version and all eleven internal tinybox-* path dependencies, and the search found no remaining literal 0.2.3 in the tree other than substrings inside test IP addresses such as 10.2.3.4, so nothing needs changing before merge.
• Lane summary: A pure version bump: `[workspace.package] version` and all eleven internal `tinybox-*` path dependencies move from 0.2.3 to 0.2.4 in lockstep. Crate manifests take their version from `version.workspace = true`, so no member is left referencing a stale 0.2.3, and the search for any remaining literal `0.2.3` in the tree turned up nothing (the only `0.2.3` hits are substrings inside test IP addresses `10.2.3.4`). Nothing to change before merging. _The code index is behind this pull request (indexed at `dab5353ae8db`), so retrieved context may be out of date._

security

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: Answered with no findings: because the workspace package version and every internal path dependency move in lockstep, no inter-crate version mismatch is introduced, no dependency, feature, or CI configuration changes, and the pinned tinystoragedrivers git dependencies are untouched.
• Lane summary: A pure version-bump change: workspace package version and every internal path dependency move from 0.2.3 to 0.2.4 in lockstep, so no inter-crate version mismatch is introduced and no dependency, feature, or CI configuration changes. The pinned tinystoragedrivers git dependencies are untouched. Nothing here is a reportable defect. _The code index is behind this pull request (indexed at `dab5353ae8db`), so retrieved context may be out of date._

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No behavioural change: nothing outside documentation, configuration and tests.

commits

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: Answered with no findings: no sensitive content found in committed files.
• Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `dab5353ae8db`), so retrieved context may be out of date._

description

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: Answered with no findings: the description accurately describes the diff as a version bump with no behaviour change, and no stray 0.2.3 references remain in Cargo.toml while Cargo.lock carries matching 0.2.4 entries.
• Lane summary: The diff is a pure version bump: the workspace version and all internal path-dependency version constraints move from 0.2.3 to 0.2.4, and the search confirms no stray 0.2.3 references remain in Cargo.toml while Cargo.lock carries matching 0.2.4 entries. The description accurately describes this as a version bump with no behaviour change; nothing in the diff contradicts it. _The code index is behind this pull request (indexed at `dab5353ae8db`), so retrieved context may be out of date._

Evidence and run details

• Models: ladder/vectors-oai3, deepseek-v4.1-flash
• Spend: $0.001986
• Tokens: 104330 input · 2502 output · 25216 cached · 45 embedding
• Updated: 2026-10-30T10:07:59Z

Head	State	Pass summary
86236c51165e	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 2026-10-30T10:07:59Z)

[coderabbitai]

No actionable comments were generated in the recent review.

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: cf8c8fce-2c9e-41ae-ab80-1131cf221c50

Commits

Reviewing files that changed from the base of the PR and between 63232ca and 86236c5.

Files ignored due to path filters: 1

• Cargo.lock is excluded by !**/*.lock

Files selected for processing: 1

• Cargo.toml

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

Walkthrough

The workspace package version and listed internal tinybox-* dependency versions change from 0.2.3 to 0.2.4. Pinned tinystoragedrivers dependencies remain unchanged.

Changes: Release version update

Layer / File(s)	Summary
Workspace and dependency versions Cargo.toml	The workspace package and listed internal tinybox-* dependencies change to version 0.2.4. Pinned tinystoragedrivers dependencies remain unchanged.

Priority: Normal

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Possibly related issues

• tinyhumansai/tinybox#27 — This PR updates workspace and internal crate versions, addressing the issue’s release-version alignment objective.

Possibly related PRs

• tinyhumansai/tinybox#135 — This earlier PR bumped the workspace and internal crate versions to 0.2.3.
• tinyhumansai/tinybox#136 — This PR added tinybox-openshell, whose internal version requirement changes in this update.
• tinyhumansai/tinybox#138 — This PR integrated tinybox-openshell; this update changes the related internal crate version requirements.

Suggested reviewers: tinysweeper

Merge Risk: Minimal · up to 86236

This version-only update appears ready to merge subject to normal build and release checks; no behavioral regression is identified.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the release version update to tinybox 0.2.4, which matches the main change in the pull request.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{A rabbit checks the manifest line,
“Now version two-point-four is fine.”
The tiny crates all match the call,
While storage pins stay as they were.
It hops through fields, then rests at last,
With fresh release numbers set.}

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-30T10:08:42.667486Z	86236c5	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[tinysweeper]

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0020

[M3gA-Mind]

Closing as superseded. This PR bumps the workspace from 0.2.3 to 0.2.4, but tinybox main already carries version = "0.2.4" (it came in with #140), and v0.2.4 was released from main today at d4fd2c3 (https://github.com/tinyhumansai/tinybox/releases/tag/v0.2.4). The branch is also 247 commits behind main. Nothing here is still needed.