[dependabot]

Bumps tinystoragedrivers-busproxy from v1.0.0 to v1.5.0.

Release notes

Sourced from tinystoragedrivers-busproxy's releases.

v1.5.0

What's Changed

• feat(grants): support exact secret names without widening prefixes by @​senamakel in tinyhumansai/tinystoragedrivers#55

Full Changelog: tinyhumansai/tinystoragedrivers@v1.4.0...v1.5.0

v1.4.0

What's Changed

• fix(bus): support Rust 1.85 contract consumers by @​senamakel in tinyhumansai/tinystoragedrivers#53
• build: pin the released TinyBus 0.1.7 for storage proofs by @​senamakel in tinyhumansai/tinystoragedrivers#54

Full Changelog: tinyhumansai/tinystoragedrivers@v1.3.0...v1.4.0

v1.3.0

What's Changed

• feat(bus): allow transport-free storage contract consumers by @​senamakel in tinyhumansai/tinystoragedrivers#52

Full Changelog: tinyhumansai/tinystoragedrivers@v1.2.0...v1.3.0

v1.2.0

What's Changed

• feat(memory): add opt-in native watches for memory tests by @​senamakel in tinyhumansai/tinystoragedrivers#51

Full Changelog: tinyhumansai/tinystoragedrivers@v1.1.0...v1.2.0

v1.1.0

What's Changed

• feat(storage): grant declared module needs through host policy by @​senamakel in tinyhumansai/tinystoragedrivers#50

Full Changelog: tinyhumansai/tinystoragedrivers@v1.0.0...v1.1.0

Commits

• c9ea6ff Release v1.5.0
• d7a1965 Merge pull request #55 from senamakel/epic-8056-tsd-exact-secret-needs
• 369c4df docs(grants): document exact secret grant errors
• 6f2b59f Merge TSD v1.4.0 release context
• 5d4f25b feat(grants): support exact secret name needs
• c525a17 Release v1.4.0
• 76a7d91 docs: specify exact secret grants
• 4b389e9 Merge pull request #54 from senamakel/epic-8056-tsd-bus-msrv-tinybus-017
• 085a31f build: pin callback contract to TinyBus 0.1.7
• 55b0729 Merge pull request #53 from senamakel/epic-8056-tsd-bus-msrv
• Additional commits viewable in compare view

Additional changes

This update moves tinystoragedrivers-core, tinystoragedrivers-secrets, tinystoragedrivers-busproxy, and tinystoragedrivers-client to v1.5.0. It also prevents Windows GUI hosts from opening a visible console for each stdio server child by setting CREATE_NO_WINDOW in DirectSpawner; a Windows-only test exercises that spawn path.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2c8ba265-6a3c-4969-9ade-cccf8290222b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

Tiny Sweeper review

Reviewed head: b458fce2c98b059263331f5c173f8a953cd9fc34

Verdict: Ready for maintainer review · Priority: none
Coverage: File coverage is unavailable.
Pull request purpose (title): deps: bump tinystora…

Diagnostics and supporting details

Full summary

Pull request purpose (title): deps: bump tinystoragedrivers-busproxy from v1.0.0 to v1.5.0. This pull request's stated purpose is to bump tinystoragedrivers-busproxy from v1.0.0 to v1.5.0. In practice the diff moves four tinystoragedrivers crates (core, secrets, busproxy, client) to the v1.5.0 tag across the workspace manifest and the tinymcp-bus manifest, and additionally changes stdio transport behavior so that every server child spawned on Windows is launched with CREATE_NO_WINDOW, plus a Windows-only test. The latest-push delta is unavailable.

Review snapshot

Change surface	Files	Review signal	Count
Production	0	Active findings	0
Tests	0	Noted findings	0
Documentation	0	Resolved findings	0
Configuration	0	Pending checks/questions	0

Completeness: Complete
Test assessment: No supported feature-to-test mapping was available; this does not mean tests are absent or passed.

What changed

Dependency pins for tinystoragedrivers-core, -secrets, -busproxy, and -client move from tag v1.0.0 to v1.5.0 in the workspace manifest, and tinystoragedrivers-core moves to v1.5.0 in crates/tinymcp-bus/Cargo.toml. The stdio transport's DirectSpawner now applies Windows creation flags (0x0800_0000, CREATE_NO_WINDOW) before spawning a server child, so GUI hosts do not get a visible console per child. A Windows-only async test was added for that path.

Features

• Modified — tinystoragedrivers dependency bump to v1.5.0: Workspace consumers now resolve the tinystoragedrivers crates at the v1.5.0 tag rather than v1.0.0, picking up the upstream release line's changes (including exact secret-name grants and the Rust 1.85 / TinyBus 0.1.7 work cited in the release notes); this affects core, secrets, busproxy, and client rather than only busproxy as titled. (Cargo.toml tracing = { version = "0.1", default-features = false, features = ["std"] }, crates/tinymcp-bus/Cargo.toml base64 = { workspace = true })
• Modified — Hidden-console spawning of server children on Windows: In DirectSpawner's spawn path, children launched on Windows are created with CREATE_NO_WINDOW, so a GUI host without a console no longer opens a visible console window for each server child; non-Windows behavior is unchanged. (crates/tinymcp/src/transport/stdio/mod.rs impl StdioSpawner for DirectSpawner {)

Tests

No supported feature-to-test mapping was produced. Test execution is not inferred.

Findings

No active actionable findings.

Before merge

None.

Agent review details

critique

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

security

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

tests

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

commits

• Conclusion: Success
• Scope reviewed: all assigned evidence
• Positive: The commits lane answered with no sensitive content found in committed files.
• Lane summary: No sensitive content in committed files. _The code index is behind this pull request (indexed at `bd1cf02afe42`), so retrieved context may be out of date._

description

• Conclusion: Neutral
• Scope reviewed: all assigned evidence
• Lane summary: No added or modified lines to review.

Evidence and run details

• Models: ladder/vectors-oai3
• Spend: $0.000003
• Tokens: 0 input · 0 output · 0 cached · 26 embedding
• Updated: 2026-10-21T18:14:00Z

Head	State	Pass summary
3f1fd0868ef8	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 2026-10-21T16:44:17Z)
b458fce2c98b	ready for maintainer review	0 active finding(s), 0 resolved finding(s) (at 2026-10-21T18:14:00Z)

[tinysweeper]

tinysweeper found nothing blocking. Approving.

Diagnostics

Total spend: $0.0023