LCORE-567: describe direct dependencies

[tisnik]

Description

LCORE-567: describe direct dependencies

Type of change

• Refactor
• New feature
• Bug fix
• CVE fix
• Optimization
• Documentation Update
• Configuration Update
• Bump-up service version
• Bump-up dependent library
• Bump-up library or tool used for development (does not change the final image)
• CI configuration change
• Konflux configuration change
• Unit tests improvement
• Integration tests improvement
• End to end tests improvement

Related Tickets & Documents

• Related Issue #LCORE-567

Summary by CodeRabbit

• Documentation
  • Added inline annotations for existing third-party dependencies to clarify purpose and usage.
  • No dependencies were added or removed; configuration unchanged.
  • No impact on runtime behavior or public API.
  • Improves readability for maintainers and aids onboarding, troubleshooting, and audits.

[coderabbitai]

Walkthrough

Inline comments were added to dependency entries in pyproject.toml for documentation only. No dependencies, configuration values, code, build, or runtime behavior were changed.

Changes

Cohort / File(s)	Summary
Dependency annotations pyproject.toml	Added inline comments to existing entries in the dependencies array to annotate packages (e.g., fastapi, kubernetes, llama-stack, rich, cachetools, prometheus-client, starlette, aiohttp, email-validator, openai, sqlalchemy, semver, jsonpath-ng). No functional or configuration changes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

I thump my paws at tidy scrolls,
Notes by each lib, well-placed goals.
No code will shift, no tests will squeak—
Just clearer trails for future peek.
With whiskers twitch and docs aligned,
This bunny’s bliss: neat, well-defined.

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

💡 Knowledge Base configuration:

• MCP integration is disabled by default for public repositories
• Jira integration is disabled by default for public repositories
• Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 0d33c23 and 48f6dee.

📒 Files selected for processing (1)

• pyproject.toml (1 hunks)

✅ Files skipped from review due to trivial changes (1)

• pyproject.toml

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)

• GitHub Check: build-pr
• GitHub Check: e2e_tests

✨ Finishing Touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

• Add @coderabbitai ignore or @coderabbit ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

• Visit our Status Page to check the current availability of CodeRabbit.
• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[coderabbitai]

Actionable comments posted: 0

🧹 Nitpick comments (3)

pyproject.toml (3)

25-41: Standardize comment phrasing for consistency and clarity.

Unify on “Used for …” + fix minor grammar/capitalization.

-    # needed by HTTP service base
+    # Used for HTTP service base
 ...
-    # needed auth/k8s
+    # Used for auth/k8s integration
 ...
-    # needed to call Llama Stack
+    # Used to call Llama Stack APIs
 ...
-    # used by logger
+    # Used by logger
 ...
-    # used by JWK token auth handler
+    # Used by JWK token auth handler
 ...
-    # metric exporter
+    # Used for metrics exporter
 ...
-    # bearer token extraction
+    # Used for Bearer token extraction
 ...
-    # used by JWK token auth handler
+    # Used by JWK token auth handler

---

44-47: Avoid implying OpenAI client is part of “OpenAPI exporter.”

Email validation ties to schema generation; OpenAI client is unrelated. Clarify with a dedicated comment.

-    # OpenAPI exporter
+    # OpenAPI / schema support
     "email-validator>=2.2.0",
+    # OpenAI client
     "openai==1.99.9",

---

47-51: Keep the remaining notes consistent.

Minor wording tweak for uniformity.

-    # used by database interface
+    # Used by database interface
 ...
-    # used by Llama Stack version checker
+    # Used by Llama Stack version checker
 ...
-    # used by authorization resolvers
+    # Used by authorization resolvers

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

💡 Knowledge Base configuration:

• MCP integration is disabled by default for public repositories
• Jira integration is disabled by default for public repositories
• Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between be56d50 and 0d33c23.

📒 Files selected for processing (1)

• pyproject.toml (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (2)

• GitHub Check: build-pr
• GitHub Check: e2e_tests

🔇 Additional comments (1)

pyproject.toml (1)

25-53: LGTM for doc-only clarifications in dependencies.

Comments improve readability; TOML comments inside an array are valid and won’t affect resolution.