docs: open PR triage dashboard (do not merge)

[jatinkrmalik]

Description

Working snapshot of all 21 open PRs, reviewed 13 Aug 2026 against current main. Do not merge this into main. Close this PR once the triage is done.

Files:

• docs/open-pr-triage.html — print-friendly dashboard (open in a browser, or Print → Save as PDF). Each card has a Copy button for the review comment.
• docs/OPEN_PR_TRIAGE.md — same content as Markdown, with paste-ready comments in <details>.

Verdict

0 of 21 can squash-merge as they sit. Four are one rebase or CI fix away. Five should be closed.

Do first

1. fix(installer): gate util-linux-extra to Ubuntu 24.04+ #635 installer util-linux-extra — already approved; rebase onto Ayatana package lists, re-run CI, merge. Ubuntu 22.04 still broken on main.
2. feat(text-injection): let config.json pin the injection backend #649 pin injection backend in config.json — approve first-time-contributor workflows, then merge. Prefer this over feat(injection): add selectable text injection backends #402.
3. fix(tray): reuse open Settings/Logs dialog instead of duplicating it #667 reuse Settings/Logs dialog — wrap the new tests in patch.object so 3.9/3.10 pass, then merge. AppImage red Xes are GitHub 503s.
4. feat(security): pin and verify every model download with secured UX #575 model hash pinning — CI green and mergeable, but Bugbot still has a false-success download dialog and installer zip symlink gap. Fix those, then merge.

Close

PR	Why
#556 Preserve Clipboard	Restore already landed always-on in #588/#646. This branch would make it opt-in again. Invite a tiny wl-copy --sensitive follow-up.
#402 selectable backends	Superseded by VOCALINUX_FORCE_BACKEND + #649. Runtime reload does not rewire dictation.
#425 Firefox paste	Window-title heuristic, xdotool on Wayland IBus, skips clipboard restore. Pin xdotool on #649 instead.
#353 Super + --settings	suspend_handler already on main; super+super was migrated away. Salvage --settings as a ~40-line new PR.
#291 custom shortcut capture	Shipped in #493 / parse_shortcut_spec. The single-key contract bug was never fixed.

Keep, don’t merge yet

• chore(deps): bump the npm_and_yarn group across 1 directory with 3 updates #662 Dependabot: title says postcss, diff also bumps Next 15 → 16 and breaks the website build. Recreate a postcss-only bump.
• feat(commands): localize punctuation voice commands (#640) #642 localize punctuation commands — real [FEATURE] voice command only available in english? #640 fix; rebase PRODUCT.md (keep AGPL + Right-Alt PTT), then undraft after a live Italian dictation check.
• docs: improve project documentation for a clearer public surface #634 docs rewrite — still worth it, but would republish GPL and Toggle-as-default if merged as-is.
• feat: opt-in D-Bus activation for compositor global shortcuts #568 D-Bus compositor shortcuts — rebase onto current main (not cc69c7e).
• Pipe transcriptions through an optional postprocessing script #479 postprocessing script — settings sidebar has landed; rebase there, require an absolute executable path, stop logging stdout.
• feat(tray): add recent dictation snippets history menu 🤖🤖🤖 #487 recent snippets — rebase, default history off, purge text on “delete that”.
• feat(ui): floating glowing dictation overlay #516 dictation overlay — default off, don’t leave a full-width mapped idle strip.
• feat(snap): Snap packaging recipe and Snap Store publish strategy #519 Snap recipe — drop network-bind and home; delete the duplicate 315KB SVG. Store account is not required to merge the recipe.
• feat(speech_recognition): add faster-whisper engine backend #543 faster-whisper — keep draft; installer claims CUDA then installs CPU torch.
• feat: add configurable Whisper language candidates #424 language candidates — keep draft; rewrite against resolve_whisper_language(), add a probability floor.
• feat: experimental real-time streaming transcription (fixes #320) #387 streaming transcription — keep draft; Whisper path is windowed re-transcribe, live injection is a stub.
• refactor: mega-cleanup of dead bloat #503 ponytail mega-cleanup — keep draft; deletes APIs main now uses (get_shortcut_display_name, show_notifications, Flatpak resource path). Slice into small new PRs.

Type of Change

• 📖 Documentation update (internal triage snapshot only)

Additional Notes

Paste-ready GitHub review comments are in the HTML (Copy button) and in the Markdown <details> blocks. Overlaps checked: #649 vs #402, #556 vs clipboard restore on main, #425 vs IBus Firefox, #291 vs #493, #353 vs suspend_handler.