Update the pinned tinybus submodule to latest

[senamakel]

What changed and why

Moves the vendor/tinybus gitlink from 0b161d2 to c35105f
(tinyhumansai/tinybus#15, "attest-pinned-release"). Gitlink only — no source
changes in this repository, per the vendored-dependency rule in AGENTS.md.

Upstream brings roughly 5k lines across 28 files: a new secret module, a new
stream module with base64 framing, substantial work in module/host.rs and
router.rs, and new docs/modules/ coverage for attest, secret, and
stream.

Public API and behavior changes

None. The template's own surface is untouched, and nothing upstream required an
adaptation on this side.

Validation

Command	Result
cargo fmt --all -- --check	pass
cargo clippy --all-targets --all-features -- -D warnings	pass
cargo build --all-targets --all-features	pass
cargo test --all-features	pass — 32 tests
RUSTDOCFLAGS="-D warnings" cargo doc --no-deps --all-features	pass
cargo deny check all	pass
cargo build --locked --release --lib -p template	pass
cargo run -p template --example verify_module -- target/release/libtemplate.so	pass — loaded through the real dynamic loader and answered Greet

Cargo.lock is unchanged: the tinybus crates keep version 0.1.0 and their
dependency set did not move.

The two tinybus surfaces the release workflow calls were checked explicitly
rather than assumed, since neither is exercised by CI:

• crates/tinybus/examples/github_module_host.rs still exists.
• tinybus modules checksum --path ... --output ... still accepts the same
  flags (verified by running --help against the new pin).

Follow-up, not in this change

Upstream added an attest module and documentation for attesting a pinned
release. This repository's release workflow does not use it. Adopting it is a
deliberate change to the release contract and belongs in its own PR.

[coderabbitai]

Warning

Review limit reached

Your included review limit has been reached.

You’re in a promotional period — use the checkbox below to run this review for free:

• Run review for free

_{On-demand reviews are free for the next 30 days. After that, they cost $0.25 per reviewed file.}

How can I continue?

Run this review now using the option above, or comment @coderabbitai review --use-credits.

You can also wait for the limit to reset (next review available in 49 minutes), then comment @coderabbitai review or push new commits to the PR.

An organization admin can change what happens after included review limits in Billing.

How do review limits work?

CodeRabbit enforces per-developer PR review limits within each organization.

For paid Pro and Pro+ reviews, CodeRabbit uses a developer's included PR review attempts over the past 7 days to set the current hourly allowance. At typical activity levels, the full plan allowance applies. Higher sustained activity can lower the allowance until earlier attempts leave the 7-day window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: fe3e1e9a-7c4b-428b-b58d-978134db3bfb

📥 Commits

Reviewing files that changed from the base of the PR and between 587c903 and 9ebb998.

📒 Files selected for processing (1)

• vendor/tinybus

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[tinysweeper]

tinysweeper found nothing blocking. Approving.

$0.0000 · 0 in / 0 out · 8 embedded · openrouter/openai/text-embedding-3-small