+ "body": "[agent] Janitor: the hourly issue and discussion janitor rewrites this log each run. It shows the last run, the actions it took with a reason for each, a rolling list of recent actions, deferred candidates, and anything that needs a human. The routine writes it to the `janitor/ledger` branch, and a workflow on that branch applies it here.\n\n## Last run\n2026-11-01 19:18Z on origin/main `cbbbdb90` (#1796, merged 2026-10-30 13:28Z). Reviewed 144 open issues, the issues closed since 2026-10-25, and the PRs updated since 2026-10-18. No PR has merged since 2026-10-30 13:28Z, and no issue has closed since 2026-10-30 13:28Z.\n\n## This run\n- **Issues closed:** none. No merges since `cbbbdb90`. The new issues (#1940–#1942, #1945, #1949–#1952) carry file:line evidence or CI run links, and none duplicates an open issue or is empty/invalid.\n- **Labels fixed:** none needed. No closed issue carries `agent:claimed`, and every bughunt issue has its `pm:*` label.\n- **Claims:** all live. New since 13:20Z: #1937 (PR #1938), #1941 (PR #1944). #1109 and #691 keep their claims under `agent:needs-human` and are left alone.\n- **Discussion ops:** this log only. No new ledger drift: nothing has closed since the last report.\n\n## Recent actions (rolling, newest first)\n- 2026-11-01 19:18Z: no-op run (main still `cbbbdb90`, no merges since 2026-10-30 13:28Z, no closes, no label fixes, no new ledger drift)\n- 2026-11-01 13:20Z: no-op run (main still `cbbbdb90`, no merges since 2026-10-30 13:28Z, no closes, no label fixes, no new ledger drift)\n- 2026-11-01 07:19Z: no-op run (main still `cbbbdb90`, no merges since 2026-10-30 13:28Z, no closes, no label fixes, no new ledger drift)\n- 2026-11-01 01:19Z: posted a drift comment on pip ledger #309 (#1794 closed by #1796 `cbbbdb90`, still listed as open / `fail`)\n- 2026-11-01 01:19Z: removed `agent:claimed` from closed #1794\n- 2026-10-30 07:26Z: no-op run (main still `5ca56238`, no merges since 22:47Z, no closes, no label fixes, no new ledger drift)\n- 2026-10-30 01:20Z: closed #1845 as a duplicate of #705 (same consolidation; current site list copied over)\n- 2026-10-30 01:20Z: removed `agent:claimed` from closed #656\n- 2026-10-30 01:20Z: posted a drift comment on ledger #319 (#656)\n- 2026-10-29 19:20Z: removed `agent:claimed` from 11 closed issues (#1818, #1808, #1804, #1799, #1782, #891, #622, #584, #513, #437, #423)\n- 2026-10-29 19:20Z: posted drift comments on ledgers #318 (#622, #584, #513, #423) and #304 (#437)\n- 2026-10-29 13:30Z: removed `agent:claimed` from 6 closed issues (#1823, #1821, #1815, #1810, #683, #614)\n- 2026-10-29 13:30Z: posted drift comments on ledgers #316 (#1821), #317 (#1810, #1823), #318 (#683)\n- 2026-10-29 07:20Z: no-op run (main still `ecd4924e`, no merges since 22:56Z, no closes, no label fixes, no new ledger drift)\n- 2026-10-29 01:20Z: removed `agent:claimed` from 6 closed issues (#1791, #1784, #1135, #534, #489, #459)\n- 2026-10-29 01:20Z: posted drift comments on ledgers #315 (#1135), #318 (#534, #459, #394), #320 (#489)\n- 2026-10-28 19:25Z: removed `agent:claimed` from 19 closed issues (#1777, #1774, #1770, #1766, #1761, #1758, #1756, #1753, #1751, #1749, #1268, #1123, #1063, #998, #655, #550, #535, #398, #397)\n- 2026-10-28 19:25Z: posted drift comments on ledgers #303 (#1268), #309 (#1758), #316 (#1749, #1761), #318 (#535, #550, #655), #320 (#397, #398, #553)\n- 2026-10-28 13:39Z: no-op run (main still `b787454e`, no closes, no label fixes, no new ledger drift)\n- 2026-10-28 07:35Z: posted drift comments on ledgers #318 (#350 closed 06:41Z, still `fail` in the matrix) and #309 (#668 closed 02:08Z, still `fail` in two rows)\n- 2026-10-28 01:20Z: removed `agent:claimed` from 2 closed issues (#444, #935)\n- 2026-10-28 01:20Z: posted drift comments on ledgers #303 (#935, closed by #1736 `8709d3d7`) and #308 (#444, closed by #1719 `8b327654` + #1741 `ffa6ef86`)\n- 2026-10-27 13:35Z: closed #1737 as completed (#1740 `a5172c42`; `output_retrying_dns` retries yarn classic installs on `EAI_AGAIN`, used by all four yarn-classic suites)\n- 2026-10-27 13:35Z: removed `agent:claimed` from 22 closed issues (#991, #962, #981, #463, #505, #506, #819, #758, #692, #673, #985, #1235, #639, #859, #406, #1105, #450, #842, #740, #536, #641, #422)\n- 2026-10-27 13:35Z: posted drift comments on ledgers #304 (#991, #758, #692), #305 (#962, #859), #308 (#406), #309 (#819, #740), #310 (#639, #1105), #311 (#450, #1105), #312 (#641), #313 (#981, #842), #314 (#505, #673), #315 (#506), #316 (#985, #1235), #317 (#422), #321 (#463, #536)\n- 2026-10-26 13:30Z: posted a drift comment on Cargo ledger #315 (#573 closed 2026-10-26 04:29Z as fixed by #1205 `b17a114a`, still listed as `fail` in the run cells)\n- 2026-10-25 13:20Z: no-op run (no merges since `3db3cdf6`, no closes, no label fixes, no new ledger drift)\n- 2026-10-24 13:21Z: removed `agent:claimed` from 30 closed issues (#1615, #1645, #1631, #1618, #1576, #1581, #1638, #1594, #1630, #1584, #1595, #1589, #1626, #1597, #1600, #1601, #1473, #1624, #1610, #1619, #1570, #1608, #1681, #1685, #1688, #1115, #1611, #1606, #1104, #783)\n- 2026-10-24 13:21Z: posted drift comments on ledgers #302 (#1595, #1576, #1618, #1581), #303 (#1619, #1597, #1638), #304 (#1115, #1610, #1629), #305 (#783, #1611, #1630), #306 (#1019, #1600, #1581, #1631), #307 (#1601, #1584), #309 (#1104), #310 (#1589, #1603), #311 (#1615, #1589), #313 (#1608), #316 (#1626, #1594)\n- 2026-10-22 13:20Z: removed `agent:claimed` from 8 closed issues (#1635, #1623, #1613, #1604, #1602, #1587, #1572, #1567)\n- 2026-10-22 13:20Z: posted drift comments on ledgers #309 (#1567, #1587, #1602, #1623), #310 (#1604, #1613), #311 (#1635), #313 (#1572)\n- 2026-10-21 13:22Z: removed `agent:claimed` from 11 closed issues (#1633, #1627, #1621, #1616, #1598, #1578, #1569, #1558, #1554, #653, #651)\n- 2026-10-21 13:22Z: posted drift comments on ledgers #302 (#1627, #1554), #304 (#1558, #1578), #305 (#1598), #306 (#1621), #307 (#1633), #310 (#1569), #313 (#1616), #315 (#651, #653)\n- 2026-10-17 13:20Z: posted a drift comment on ledger #304 (to-do item `0000000000` still pending on #1538, fixed by #1548 on 2026-10-14)\n- 2026-10-16 13:23Z: released stale claim `2026-10-13T14:22:13Z-3898b9` on #1473 (slices #1475 and #1486 merged, no open PR, claimer silent >48h; kept open because the bench ledger still lists poetry slow at 2.37x on 10-15 and 2.67x on 10-16)\n- 2026-10-16 13:23Z: removed `agent:claimed` from 8 closed issues (#1579, #1573, #1564, #1561, #1557, #1549, #1547, #1545)\n- 2026-10-16 13:23Z: posted a drift comment on #575 (bench runs 2026-10-12 to 2026-10-16 are on `bench/ledger` but not in the discussion)\n- 2026-10-15 13:26Z: closed #1202 as completed (#1230 `8439e555` and #1239 `d240c658`; `PurlKey` and the crawler normalize NuGet versions, and `nuget_vendored_at_a_four_part_version_stays_live` covers the prune case; only an optional file move is left)\n- 2026-10-15 13:26Z: closed #914 as completed (#1253 `e9be7462`; `verify_member_bytes` streams via `zip_member_git_sha256`, regression test `verify_member_bytes_streams_a_large_deflated_member`)\n- 2026-10-15 13:26Z: removed `agent:claimed` from 38 closed issues (#1542, #1541, #1540, #1538, #1534, #1531, #1514, #1282, #1266, #1236, #1220, #1196, #1116, #1100, #1097, #1074, #988, #952, #939, #869, #759, #642, #586, #564, #547, #531, #509, #484, #458, #455, #439, #409, #393, #392, #391, #386, #339, #338)\n- 2026-10-15 13:26Z: posted drift comments on ledgers #306 (#1541) and #303 (#1514 still `fail` in the 11.28.3 / 12.11.2 rows)\n- 2026-10-14 13:21Z: removed `agent:claimed` from 22 closed issues (#1527, #1524, #1521, #1516, #1511, #1509, #1507, #1503, #1501, #1494, #1492, #1490, #1481, #1477, #1476, #1471, #1467, #1465, #1462, #1460, #1450, #1445)\n- 2026-10-14 13:21Z: posted drift comments on ledgers #303 (#1460), #304 (#1462, #1516), #306 (#1521), #310 (#1445, #1501), #311 (#1503, #1527), #316 (#1476, #1477, #1509)\n- 2026-10-13 13:25Z: released stale claim `2026-10-08T17:56:10Z-d68635` on #748 (slices #1045 and #1153 merged 2026-10-08, no open PR, claimer silent since 2026-10-08 18:00Z)\n- 2026-10-13 13:25Z: released stale claim `2026-10-08T10:59:14Z-aa074d` on #747 (#1126 merged slice 1 on 2026-10-11 01:02Z; about 68 inline `starts_with(\"pkg:<type>/\")` checks remain on main, no open PR)\n- 2026-10-13 13:25Z: removed `agent:claimed` from 4 closed issues (#1437, #1435, #1423, #1414)\n- 2026-10-12 13:35Z: released stale claims on #1236 (`2026-10-09T07:22:27Z-55af4e`), #1202 (`…-4b9e1c`), #1089 (`…-6bbcee`), #989 (`…-4f66ea`), #905 (`…-7070bc`), #815 (`…-78dc6b`), #782 (`…-4b7e1a`), #594 (`…-ead28c`): slices merged by 2026-10-09 23:08Z, no open PR for the rest, claimer silent for more than 48h\n- 2026-10-12 13:35Z: removed `agent:claimed` from 11 closed issues (#1385, #1379, #1374, #1373, #1368, #1285, #1233, #1092, #1082, #896, #890)\n- 2026-10-12 13:35Z: posted drift comments on ledgers #302 (#1233), #305 (#1082), #310 (#1285), #316 (#896, #1092)\n- 2026-10-11 13:26Z: released stale claim `2026-10-08T02:56:01Z-9ee976` on #1067 (#1106 merged the `pdm_site` slice only, claimer silent since 2026-10-08 03:01Z)\n\n## Deferred / unsure\n- #1880 / #1836 are declared siblings (labels vs JSON); both stay open.\n- #1869 (claimed, PR #1870) is close to child 2 of #676 (one retry loop for the API client). If #1870 merges, check whether #676 can close.\n- #1858 overlaps #794 only on the `GlobalArgs::lock_timeout()` accessor. They are different changes, so both stay open.\n- #977: #1825 merged (`e006861c`, `Refs`) and the pip half was verified fixed. It stays open for the `agent:needs-human` drift-keep exit-code decision.\n- #549: open Go PR #1698 may fix it.\n- #1793: hosted half of #489, needs a contract decision; open.\n- #1089: criterion 2 isn't met (sentence assertions remain), so it stays open.\n- #1650: step 1 merged in #1652. Step 2 (bounded retry) waits on the next occurrence.\n- #1588: fix PRs #1590 and #1692 merged. The issue has `agent:needs-human`; a human can close it.\n- #1607 (yarn-berry rescan): #1693, #1695 and #1701 merged, and it has `agent:needs-human`. It's labeled `pm:yarn` while other berry issues use `pm:yarn-berry`.\n- #1425, #1472 (perf regressions) and #761, #836, #1246 (slow scans): no bench reading since 2026-10-17, so whether they're fixed can't be checked.\n- #780 and #594: hosted slices merged, vendored slices still open. #913 and #855 are still open work.\n- Maven ledger #318 and Gradle ledger #319 haven't been rewritten since early October, so many of their `fail` marks are stale.\n- #1809 is a deliberate split of #622, not a duplicate.\n- #814 / #815: #1822 kept its fix local, so both stay open.\n- #1846 (pnpm brace/class globs) and #1833 (Cargo `[...]` classes) are different code paths, not duplicates.\n- #1902 (parent `.yarnrc` / yarn pnpm store missed under `--cwd .`) and #1901 (one `.yarnrc` tokenizer) touch the same crawler code, but one is a lookup bug and the other a tokenizer refactor. Both stay open.\n- #1904 (vendored refusal from an npm workspace member doesn't name the root) is new and has no open duplicate. #1094 (stray member lock) and #884/#1097 (yarn classic hosted) are closed and are different triggers.\n- #1921 (`vendor` / `vendor --check` from an npm workspace member exit 0) and #1904 (vendored `scan`/`get` from a member refuse with a looping remedy; PR #1913) are different commands with opposite symptoms. Both stay open.\n- #1919 (crawler tests read the real `HOME`/`YARN_NODE_LINKER`/`VIRTUAL_ENV`) proposes using #1889's shared env guard; it is a separate test-hermeticity fix, not a duplicate.\n- #1916 (lockless uv + `[tool.poetry-…]` plugin table), #1917 (one NuGet project walk; touches #594/#833 placement) and #1918 (one pnpm YAML scalar reader) are new arch-audit items pinned to `cbbbdb90`; none duplicates an open issue.\n- #1937 (vendored npm rollback/remove/`vendor --revert` on a lockfileVersion 2 lock after `npm install`) is the revert-side sibling of closed #879 (vex and `vendor --check` on the same trigger). They are different commands, so it is not a duplicate.\n- #1931 (Bundler path-tier rule written twice; ignores a falsy `disable_shared_gems`) and #1935 (move Bundler settings parsing to `formats/gem`; two `.bundle/config` key parsers) both touch `ruby_crawler.rs`, but they are separate register entries (A53 and A57) with different fixes. Both stay open.\n- #905 (BOM stripping): `formats/text.rs` now owns `strip_bom`/`split_bom`, but inline `'\\u{feff}'` stripping remains in `sbt/build.rs`, `redirect/mod.rs`, `upstream/pypi.rs`, `vex/discover/yarn.rs` and more, so it stays open. #782: `committed_artifact_intact`, `go_sum_edit::remove_lines` and `PnpmLock::wired_integrity` still exist on `cbbbdb90`, so it stays open too.\n- #1949–#1952 (arch-audit A64–A67, pinned to `cbbbdb90` with executed repros) are new. #1950 extends #715 (pom.xml element scanner) but targets `formats::xml::attr` and its NuGet twin, so it is not a duplicate. #1949/#1952 (pnpm env-lockfile document, member-importer predicate) and #1918 (pnpm scalar reader) are different readers; all stay open.\n- #1940 (toolchain gate), #1941 (claimed, PR #1944), #1942 (PTY runner) are new arch-audit test refactors; none duplicates an open issue.\n- #1945 (hosted-e2e red on every PR: patch.socket.dev 403s bun, new transitive gem patches) is production drift, not code; open PR #1946 covers the gem half only.\n\n## Needs a human\n- **#1945: hosted-e2e is failing on every PR since ~17:12Z** because patch.socket.dev returns 403 to bun's download of a hosted tarball (npm/pnpm/yarn/vlt pass). Until a CDN/WAF fix or a bypass, no PR can pass `ci-ok`.\n- **The benchmark routine** has been silent since 2026-10-17 07:24Z. #575 hasn't changed since 2026-10-16.\n- #1052 (port to depscan's `composer-lock-members.ts`, outside this repo) is `agent:needs-human`.\n- Open `agent:needs-human` decisions: #267, #686, #691, #977, #1052, #1065, #1099, #1109, #1130, #1200, #1248, #1352, #1512, #1588, #1607, #1660, #1670, #1720, #1862, #1881.\n- The architecture register discussion #560 is closed, and #1830 (the file-by-file implementation review) is the new living document that the arch-audit issues cite. The janitor leaves both alone.\n- Discussion #301 (\"Welcome to socket-patch Discussions!\") is closed. The janitor keeps it as is.\n\n---\n_Generated by [Claude Code](https://claude.ai/code)_\n\n"
0 commit comments