[Issue Arborist] Run report

[github-actions[bot]]

🌳 Issue Arborist Report

Issues analyzed: 76

Parent issues created

None. No new orphan cluster of 5+ lacked a parent.

Links created

Parent	Sub-issue	Reasoning
#2076	#2067, #2068, #2069, #2070, #2071	The parent body explicitly lists these as its five follow-ups, but they were not linked.
#1283	#2322, #2252, #2040	These are deps-release-notes issues for copilot-cli, awf and mcpg, which is the parent's stated scope.
#1549	#2463, #2462, #2461, #2460, #2459, #2458, #2448, #2444	These are failures of agentic workflows, which is the parent's stated scope.

Suggested (not linked — for maintainer review)

• test(package-feeds): assert the cargo branch of the package-manager wrapper #2357, perf(compile): avoid blocking fs reads in the async compile path for the package-config check #2358, fix(compile): surface unreadable repository roots in the package-config check #2359 and fix(compile): decide how the package-config check treats symlinked config files #2360 are all package-config-check follow-ups, but that is only 4 issues, so no parent was created.
• [agent-issue]: Agents cannot supply work-item fields; custom-fields is compile-time only, so runtime-computed values never reach ADO #2044 and [agent-issue]: Allow agent-supplied priority on work items #2354 both ask for agent-supplied work-item fields.
• 🔴 Red Team Audit — High: shell(git:*) allow-tool rule permits arbitrary command execution via git -c config override #2331, 🔴 Red Team Audit — High: link-work-items area-path target scope silently fail-opens #2261 and 🔴 Red Team Audit — High: Shell injection via runtimes.lean.toolchain #855 are Red Team security findings.
• chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0 #1041, chore(workflows): recompile safe-output fixtures with ado-aw v0.36.0 #1027 and chore(workflows): recompile safe-output fixtures with ado-aw v0.38.0 #1156 are fixture recompile chores.

Observations

• Several issues are open but absent from the pre-downloaded data, such as [Parent] Track and act on upstream dependency release-note action items (awf, mcpg, copilot-cli) #1283's older members. A parent's own list of sub-issues can be out of date.
• [Parent] Issue Arborist - Issue Group #1284 and [Parent] Track and act on upstream dependency release-note action items (awf, mcpg, copilot-cli) #1283 overlap in purpose, so one may be redundant.

Generated by Issue Arborist · auto · 23.8 AIC · ⊞ 5.9K · ◷

• expires on Nov 18, 2026, 9:02 PM UTC

[github-actions[bot]]

This discussion has been marked as outdated by Issue Arborist.

A newer discussion is available at Discussion #2468.