[jrusso1020]

What

A daily actions/stale workflow:

• PRs with no activity for 14 days get a stale label and a comment, then close 7 days later.
• triage/needs-info issues follow the same timing.
• Any push, comment or label change resets the clock.

Why

Some PRs that claim help wanted issues stop moving. While they stay open, the issue looks taken and nobody else picks it up. Closing them after three weeks of silence frees the issue for the next contributor.

Related work

The new "Stale PRs and issues" section in TRIAGE.md documents the rule, plus restoring help wanted on an issue a stale close frees.

How

• actions/stale v11.0.0, pinned by SHA like the repo's other actions.
• Exempt: drafts, keep-open, dependencies and security.
• .github/renovate.json now labels Renovate PRs dependencies. Renovate skips an update whose PR was closed unmerged, so those PRs must never be auto-closed. Security PRs already carry security.
• Issues are limited to triage/needs-info. Ready and needs-design issues are never touched.

Test plan

• YAML parses. oxfmt --check passes on the three files.
• Dry run against today's data, using each item's updated_at (the field the action reads):
  • 7 PRs would be marked on the first run, all from maintainers, the oldest last touched 42 days ago: docs(release): list #4330 in the v0.8.71 release notes #4400 fix(cli): preview font localization substitutes instead of hard-failing #4450 fix(studio): a select's options open above the panel controls #4710 fix(core): picker labels honour data-label, then an image's alt #4727 docs(skills): hyperframes-core keeps data-hf-id and the derived-media lineage #4728 feat(studio): emit sdk_absent_read_recovery around the stale-tree fallback #4843 fix(cli): let check deadline honour --timeout and an env override #5558.
  • No needs-info issue is past 14 days yet.
  • Stalled contributor PRs (fix(registry): bake map geometry offline and register timelines synchronously #3953, fix(studio): show failures and empty searches in the global asset view #4903, feat(studio): show canvas gesture position, size and rotation #5594, feat(studio): type an exact preview zoom and see a pixel grid at high zoom #5708) were last touched between Oct 24 and Oct 26, so they reach 14 days around Nov 7 to 9.
• After merge, run the workflow once via workflow_dispatch and check the labels and comments it posts.

🤖 Generated with Claude Code

[heygengenesis]

Verdict: APPROVE · 0 blocker · 0 important · 1 nit

• nit: the keep-open label doesn't exist in the repo yet (stale doesn't either, but the action creates it on first add). Create keep-open so maintainers can apply it as the stale comment and TRIAGE.md describe.

Checked

• 4391f3da… is the actions/stale v11.0.0 tag commit.
• Renovate: vulnerabilityAlerts.labels: ["security"] replaces top-level labels, so security PRs carry security and are still exempt. No packageRules override labels.
• only-issue-labels scopes issues only and leaves PRs alone. actions: write covers the action's state cache.
• CI is green on 3ca0bc4. BLOCKED is the review gate.