fix(db): extend to_version readr::read_csv [stale_floor]

[ndohpenngit]

What does this PR do?

Auto-generated by the staleness remediation agent.
Action: Extend to_version (stale ceiling)

Entry

readr::read_csv

• Staleness: stale_floor
• Gap: from_version 1.4.99 << current 2.2.0 (>= 1 major version(s) behind)
• Reference: N/A

Changelog evidence

The breaking change (literal data interpretation) was introduced in readr 2.0.0 (2021-07-20) and remains unfixed through 2.2.0 (per changelog). Current CRAN is at 2.2.0; the window to_version=2.2.9 covers the next minor series (2.3.x) which should be extended to 2.2.9999 to ensure all 2.2.x users are flagged until confirmed fixed. Pharma/clinical environments pin versions for 3–4 years; users at 2.0.0–2.2.9 remain at real risk of silent reinterpretation of literal vectors without I() wrapping.

Related issues

Part of the weekly staleness remediation run. Update the staleness tracking
issue once this PR is merged.

Type of change

• Bug fix
• New feature
• Database entry correction
• Documentation
• Other

Checklist

• Claim verified against official changelog (by agent)
• Human reviewer has spot-checked the changelog evidence
• validate CI check passes in reproducr-db
• sync_db.R runs cleanly after merge
• Tracking issue updated

Corrected entry

{
  "pkg": "readr",
  "fn": "read_csv",
  "from_version": "1.4.99",
  "to_version": "2.2.99",
  "risk": "medium",
  "description": "In readr 2.0.0, the second-edition (vroom-based) parsing engine changed how length>1 character vectors are interpreted: previously treated as literal data to parse, they are now assumed to be multiple file paths. Code passing literal CSV text as a length>1 character vector (e.g. multiple lines built with c()) may silently be interpreted as a list of filenames instead of being parsed as data. Wrap literal data in I() to preserve the old behaviour; readr only began warning about un-I()'d literal data in 2.2.0.",
  "reference": "https://readr.tidyverse.org/news/index.html#readr-200",
  "added_by": "ndohpenngit",
  "added_date": "2026-06-11"
}