Repository navigation
Stale open PRs: 16 Renovate updates (12 security) and platform-ssh-world #211 with merge conflicts #311
Description
Problem
Part of the open PR list has not moved for weeks or years.
Renovate. I saw 16 open Renovate PRs on the first page of 30. Twelve are marked [security]:
- Rust: tokio Update Rust crate tokio to v1.38.2 [SECURITY] #135, sqlx Update Rust crate sqlx to 0.8.0 [SECURITY] #121 (opened 2024-08), bytes Update Rust crate bytes to v1.11.1 [SECURITY] #133, tracing Update Rust crate tracing to v0.1.40 [SECURITY] #127.
- Go: x/crypto Update module golang.org/x/crypto to v0.52.0 [SECURITY] #122 (opened 2024-12), pgx Update module github.com/jackc/pgx/v5 to v5.9.2 [SECURITY] #120, protobuf Update module google.golang.org/protobuf to v1.33.0 [SECURITY] #204, x/net Update module golang.org/x/net to v0.55.0 [SECURITY] #203, glog Update module github.com/golang/glog to v1.2.4 [SECURITY] #202, gorilla/websocket Update module github.com/gorilla/websocket to v1.5.3 [SECURITY] #201.
- JS: happy-dom Update dependency happy-dom to v21 [SECURITY] #136, vitest Update dependency vitest to v5 [SECURITY] #140.
Others: @playwright/test #79 (opened 2023-11), libtest-mimic #73 and globwalk #70 (2023-11), @chenglou/pretext #132.
I did not check whether each is still relevant. Some may already be fixed by a newer dependency, and some may not build.
platform-ssh-world (#211). SSH chat and document viewing for worlds. GitHub reports it as having merge conflicts. Sibling platform-* branches merged on 2026-10-18 and this one has not moved since 2026-10-14.
What to do
- For each security PR, check CI. Merge it if green, rebase it if red, close it if the dependency is gone.
- For feat(ssh): add chat and document viewing to worlds #211, merge main into it and resolve the conflict, or close it with a note if the design changed.
- Look at why Renovate PRs stay open: a missing required check, a failing check nobody reads, or automerge off.
Acceptance criteria
- No
[security]Renovate PR is older than 14 days without a recorded reason. - feat(ssh): add chat and document viewing to worlds #211 is merged or closed.
Activity
dezren39 commentedon Oct 24, 2026
id train triage (2026-10-24): needs-decision — project owner: stale-PR cleanup (16 Renovate updates + platform-ssh-world #211 with conflicts).
dezren39 commentedon Oct 26, 2026
Intake review
🤖 Agent note · filed
Looks largely resolved — evidence, not closing (verified this run): PR #211 (platform-ssh-world) is MERGED, satisfying the second acceptance criterion. The Renovate pile is gone: only 2 Renovate PRs are open now — #828 (p2panda-auth digest, 2026-10-25) and #827 (rust crate rand [security], 2026-10-25) — both ~1 day old, so no
[security]Renovate PR is older than 14 days without a recorded reason. #827/#828 already have their own triage issues (#830, #829, both queue/queued). Per protocol I am not closing this on a "looks solved" basis — a maintainer or sweep can close it citing this comment, or keep it open until #827 lands.Related: #829, #830 (the two remaining Renovate PRs' triage).
Notes / risks: acceptance criteria are present in the body — no body edit needed. The open question in the body (why Renovate PRs stayed open: missing/failing required check vs automerge off) was never answered; if the pile regrows, that root cause is the thing to record here.
Suggested approach: close as completed once #827 merges, with a one-line note on the Renovate root cause if it was identified during the cleanup.
dezren39 commentedon Nov 1, 2026
🤖 Agent note · triage verdict: ALREADY DONE — every PR named in this issue is merged