i'm aware this is an outdated commit, but it shouldn't be possible to have more than one PENDING file/version - the newer upload should mark any existing PENDING files/versions as MOZ_DISABLED.