Triage every open pull request and issue

Milestone: Nov 9 - Nov 13 · Parent: tinyhumansai/team#45

On Nov 9 this repo had 5 open PRs and 0 open issues. Try each PR and check each issue against main.

Done when

Every open PR and issue has a triage comment from this pass
Summary comment here

How to triage each item:

Read it, and for a PR check out the branch and try the change: build it, run the tests it touches, and exercise the behaviour it claims (for an issue, try to reproduce it on current main).
Check CI, conflicts, unanswered review feedback, and whether it is a genuine, in-scope contribution.
Leave a comment with the outcome and a next step: ready to merge (and why), needs changes (specific), duplicate or already fixed (link it), or close (with the reason).
Link it to the epic or issue it belongs to, and label it.

Tracking/epic task to triage all open PRs and issues in the repo (0 issues, 5 PRs) and leave triage comments plus a summary. Process work, not a bug or feature; low urgency. No duplicate or resolving PR candidates available.

Labelled priority: p3.

Status update, 2026-11-11 14:50 IST: merged #45. The tables below are the triage as it was done; rows for those items are now settled.

tinydocs open PRs: triage (tinydocs#60, epic team#45)

All 5 are dependabot PRs on current main c387488 (= tag v0.2.8 = openhuman's pin). Main's CI is green. Tested on our CI runner where a build could change the verdict.

PR	Verdict	Reason	Next step
#45 actions: checkout v4.4.0 → v7.0.1, upload-artifact v4.3.3 → v7.0.2	ready to merge	SHAs are the official release commits. Only touches release.yml, and the shared release workflow's download-artifact v4.3.0 reads v7 uploads.	Merge; watch the next tagged release run
#58 zip 9.0.5 → 9.2.0, tokio 1.53.1 → 1.54.1	needs changes	One ZIP-admission test fails. A our CI runner probe shows the outer text comes back, so the nested ZIP is still not admitted, but the test only asserted zip's old strictness.	Rewrite the test to check the property directly, decide on fail-closed for corrupt records, then take the bump
#29 quick-xml 0.41 → 0.42	needs changes	Breaking API: `decode()` removed, str vs bytes. `markdown/ooxml.rs` and `intake/office_order.rs` don't compile.	Port in a replacement PR, with the intake tests
#28 png 0.17 → 0.18	needs changes	Test build fails: `Option<usize>` vs `usize` at `pdf_render/mod_tests.rs:36`	One-line test port
#27 hayro 0.5 → 0.6	needs changes	Signature change: `pdf_render/mod.rs:98` needs a 4th argument	Small port, or close until PDF render is a priority

Also found (owner: tinydocs, not yet verified by a run): the ZIP admission guard covers only intake::extract. markdown::convert opens archives with a plain ZipArchive::new (src/markdown/ooxml.rs:66-67), and openhuman calls both. Worth its own issue.

Triage summary: this repo is at zero open PRs and zero open issues.

Take zip 9.2, quick-xml 0.42 and png 0.18 #63 moved tinydocs to zip 9.2, quick-xml 0.42 and png 0.18, which superseded dependabot deps: bump the cargo-minor-and-patch group across 1 directory with 2 updates #58, deps: bump quick-xml from 0.41.0 to 0.42.0 #29 and deps: bump png from 0.17.16 to 0.18.1 #28.
Take hayro 0.6 and raise the MSRV to 1.92 #64 moved to hayro 0.6 and raised the MSRV to 1.92, which superseded dependabot deps: bump hayro from 0.5.0 to 0.6.0 #27.

Nothing left open from this pass.

Navigation Menu

Repository navigation

Triage every open pull request and issue #60

Done when

tinydocs open PRs: triage (tinydocs#60, epic team#45)

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Triage every open pull request and issue #60

Description

Done when

Activity

tinysweeper commented on Nov 9, 2026

M3gA-Mind commented on Nov 11, 2026

tinydocs open PRs: triage (tinydocs#60, epic team#45)

M3gA-Mind commented on Nov 11, 2026

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions