From f7a7368d516b8cb50aeac5489d392f73cbccceff Mon Sep 17 00:00:00 2001 From: Yuriy Andamasov Date: Mon, 1 Jun 2026 02:18:52 +0300 Subject: T8943: tell CodeRabbit about the 1c current->rolling/production branch swap (#6) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Post-rollout-1c, repo AGENTS.md files still describe the pre-1c layout (reusables pinned @current, 'current (rolling)'), biasing CodeRabbit toward stale @current suggestions and flagging the canonical @production refs + the mirror caller's intentional permissions: contents: read. Add a .github/workflows/** path_instruction with the post-1c facts. 🤖 Generated by [robots](https://vyos.io) --- .coderabbit.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) (limited to '.coderabbit.yaml') diff --git a/.coderabbit.yaml b/.coderabbit.yaml index df435f3..4487471 100644 --- a/.coderabbit.yaml +++ b/.coderabbit.yaml @@ -98,6 +98,27 @@ reviews: - "!**/*.tfstate*" - "!**/.terragrunt-cache/**" + # Post-rollout-1c (Phorge T8943, 2026-05-30) context for workflow reviews. + # Many repo AGENTS.md files still describe the pre-1c branch layout and bias + # CodeRabbit toward stale `@current` suggestions; this counters that. + path_instructions: + - path: ".github/workflows/**" + instructions: > + Rollout 1c (Phorge T8943, 2026-05-30) renamed default branches fleet-wide: + release-train repos `current` -> `rolling`; `vyos/.github` and other + non-release-train repos `current` -> `production`. + (1) Reusable-workflow refs of the form + `vyos/.github/.github/workflows/.yml@production` are CORRECT and + canonical. Do NOT suggest changing `@production` to `@current`: `current` + is the OLD name, retained only as a temporary bake-period alias and slated + for removal. Any AGENTS.md still saying "reusables pinned to @current" or + "current (rolling)" is stale post-1c and must not drive review suggestions. + (2) In the mirror caller `pr-mirror-repo-sync.yml`, `permissions: contents: read` + is INTENTIONAL: the central reusable workflow performs all push/PR writes with + the `vyos-bot` GitHub App installation token (minted via the `get-token` + action), not the inherited `GITHUB_TOKEN`. Do NOT suggest broadening the + caller's `permissions` to `contents: write` / `pull-requests: write`. + finishing_touches: # Both docstring and unit-test generation are disabled at the org-wide # level; per-repo `.coderabbit.yaml` files re-enable either feature -- cgit v1.2.3