summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2026-07-14ci: T9082: onboard CodeQL scanning via central reusable workflowfeature/T9082-codeql-onboardYuriy Andamasov
🤖 Generated by [robots](https://vyos.io)
2026-07-11Merge pull request #65 from vyos/new-assets-amount-fixAndrii Klymenko
Match assets by filename instead of by position
2026-07-11Match assets by filename instead of by positionYevhen Bondarenko
2026-07-10Merge pull request #64 from asklymenko/patch-1Yevhen Bondarenko
T9075: Fix GitHub actions publishing step for rolling workflow
2026-07-10VD-4709: Fix GitHub actions publishing step for rolling workflowAndrii Klymenko
Updated asset indexing to correctly access ISO and signature files for nightly builds.
2026-06-07fix: remove async from Cookiebot loader to guarantee consent-before-GTM (#62)Yuriy Andamasov
With async, the browser starts downloading Cookiebot in parallel and immediately continues parsing, reaching GTM inline bootstrap before Cookiebot executes. Removing async makes it render-blocking so consent state is set before GTM fires. Also clarifies the after + prepend_child ordering in the comment. Generated by robots (https://vyos.io)
2026-06-02T8943: ci: remove dead amplify branch from CI push trigger (#61)Yuriy Andamasov
The amplify branch no longer exists in this repo; the trigger entry is unreachable. main was already retargeted to development in #59 (rollout 1c). This completes the trigger cleanup so the list matches real branches. 🤖 Generated by [robots](https://vyos.io)
2026-05-31ci: T8947: point CLA check at vyos-cla-signatures@production (rollout 1c ↵Yuriy Andamasov
follow-up) (#60) Rollout 1c (IS-503) renamed vyos-cla-signatures' default branch to `production`, but cla-check.yml still called the reusable at @current. The `current` branch of vyos-cla-signatures has diverged from `production` and its copy of cla-reusable.yml writes signatures to `branch: 'current'` — so CLA signatures from this repo's PRs were landing on the stale `current` branch instead of `production`. Flip the ref to @production (whose cla-reusable.yml writes to `branch: 'production'`). Note: migrating/reconciling signatures already accumulated on vyos-cla-signatures@current (and whether to delete that branch) is a separate operator decision tracked in IS-504 / T8947. 🤖 Generated by [robots](https://vyos.io)
2026-05-30ci: T8943: retarget main.yml push trigger main->development (rollout 1c) (#59)Yuriy Andamasov
The default-branch reorg renamed main->development (production is now the default). main.yml deploys by mirroring github.ref_name to an AWS Amplify branch, so the dead main trigger is replaced with development. The Amplify app has a matching development branch (operator-confirmed). amplify/production trigger entries left unchanged. Tracking: T8943
2026-04-18Merge pull request #44 from vyos/mainYuriy Andamasov
Production deploy: 1.5.0 status + Cookiebot direct loader + Mergify config
2026-04-18Merge pull request #43 from vyos/chore/add-mergify-configYuriy Andamasov
Add Mergify configuration
2026-04-18Add Mergify configuration to enable PR commandsYuriy Andamasov
Enables @Mergifyio merge/rebase/update/backport commands. No automated rules — all merges remain manual. 🤖 Generated by [robots](https://vyos.io)
2026-04-18Merge pull request #42 from vyos/fix/cookiebot-direct-loaderYuriy Andamasov
Load Cookiebot uc.js directly before GTM
2026-04-18Load Cookiebot uc.js directly before GTM on live buildsYuriy Andamasov
GTM container tag 163 was not firing the Cookiebot uc.js loader despite correct rules in the container. Loading Cookiebot directly via soupault is the architecturally correct approach anyway: consent state must be set before GTM fires any tracking tags. Widget runs after insert-google-tag-manager-head (same pattern as insert-preconnect-hints) so the final <head> order is: preconnect hints → Cookiebot uc.js → GTM snippet 🤖 Generated by [robots](https://vyos.io)
2026-04-18Merge pull request #41 from dmbaturin/1.5.0-statusDaniil Baturin
Add 1.5.0 to the release status data file
2026-04-18Add 1.5.0 to the release status data fileDaniil Baturin
2026-04-18Merge branch 'main' into productionYuriy Andamasov
Promote main to production: Cookiebot + GTM-T5VQHRT consent migration
2026-04-18Merge branch 'main' into productionYuriy Andamasov
2026-04-18Merge pull request #39 from vyos/fix/cookiebot-cbidYuriy Andamasov
Substitute real Cookiebot CBID for vyos.net
2026-04-18Substitute real Cookiebot CBID for vyos.net domain groupYuriy Andamasov
Replaces the <CBID> placeholder in the insert-cookiebot-declaration widget with the actual domain group ID (932cb8b9-5141-4dc9-9018-21fc31a0586f) registered for vyos.net in the Cookiebot admin panel. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-18Merge pull request #35 from vyos/feature/cookiebot-gtm-consentYuriy Andamasov
Migrate to Cookiebot + GTM-T5VQHRT via metrics.vyos.io
2026-04-18Merge pull request #38 from vyos/feature/cookiebot-gtm-review-fixesYuriy Andamasov
Address Copilot review: preconnect order + staging-gate cookies-policy script
2026-04-18Address Copilot review: preconnect order + staging-gate cookies-policy scriptYuriy Andamasov
Two fixes flagged by the Copilot reviewer on #35: 1. Preconnect hints were appended to the end of <head> while the GTM loader is prepended to the top, so GTM's async script creation fired before the browser ever saw the preconnect tags — they provided no benefit. Switches insert-preconnect-hints to prepend_child and adds `after = "insert-google-tag-manager-head"` so the widget runs after GTM and its prepend pushes GTM down to position 1. Result: preconnects land at the top of <head>, ahead of the GTM loader. 2. The Cookiebot cd.js script embedded directly in site/legal/cookies-policy.md rendered on every profile, so a staging visitor who hit /legal/cookies-policy/ would leak their IP to consent.cookiebot.com. Replaces the inline <script> with a <div id="cookie-declaration-placeholder"></div> and adds a new insert-cookiebot-declaration widget (profile = "live", page = "legal/cookies-policy.md") that replaces the placeholder with the real script element only on live builds. Staging now emits zero Cookiebot markup on the cookies-policy page. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-18Merge pull request #37 from vyos/chore/gitignore-soupault-cache-prodYuriy Andamasov
Ignore .soupault-cache/ build artifact directory (production)
2026-04-18Ignore .soupault-cache/ build artifact directoryYuriy Andamasov
Soupault 5.x writes incremental build caches under `.soupault-cache/` in the repo root. The directory appears as untracked after any local build and `gh pr create` warns about it. Add it to .gitignore alongside `build/*` so clean checkouts stay clean. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-18Merge pull request #36 from vyos/chore/gitignore-soupault-cacheYuriy Andamasov
Ignore .soupault-cache/ build artifact directory
2026-04-17Ignore .soupault-cache/ build artifact directoryYuriy Andamasov
Soupault 5.x writes incremental build caches under `.soupault-cache/` in the repo root. The directory appears as untracked after any local build and `gh pr create` warns about it. Add it to .gitignore alongside `build/*` so clean checkouts stay clean. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17Gate preconnect hints on profile=live via soupault widgetYuriy Andamasov
Task 5 inserted the preconnect tags directly into templates/main.html, which caused them to ship on every profile — defeating the staging privacy posture (staging visitors' IPs would leak to Cookiebot and metrics.vyos.io during TLS handshake). Moves them to a new insert-preconnect-hints widget with profile = "live", matching the pattern used for the two GTM widgets and Step 5.2's original --profile live verification intent. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17Add cookies policy page with Cookiebot declaration embed (placeholder CBID)Yuriy Andamasov
Embeds Cookiebot's auto-generated cookie declaration table. The declaration content is served by consent.cookiebot.com and rendered at display time — this repo only holds the embed shim and intro copy. The CBID is a <CBID> placeholder that MUST be substituted with the real value before merging main into production. The PR body's prerequisite checklist gates this. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17Add Cookie Policy link in footer bottom rowYuriy Andamasov
Sits next to the copyright line inside <div class="bottom">. Links to the new /legal/cookies-policy/ page created in the next commit. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17Add preconnect hints for metrics.vyos.io and consent.cookiebot.comYuriy Andamasov
Starts DNS/TCP/TLS handshake for the Cookiebot banner and GTM proxy during initial HTML parse, shaving perceivable latency off the first-visit banner paint. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17Remove custom consent banner and direct GA4 loaderYuriy Andamasov
Deletes the hand-rolled "Allow Analytics" aside, its JavaScript, its SCSS partial, and the unconditional gtag.js script. The replacement consent UI (Cookiebot banner) is loaded by the new GTM-T5VQHRT container; the custom banner is no longer needed and was also ineffective (both GTM and gtag loaded before the user clicked anything). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-17Swap GTM container to GTM-T5VQHRT via metrics.vyos.io, gate on live profileYuriy Andamasov
Migrates the site's GTM container to GTM-T5VQHRT (shared with vyos.io) proxied through metrics.vyos.io, and gates both GTM widgets on profile = "live" so they only render in production builds. The new container handles Google Consent Mode v2 defaults, Cookiebot loading, and consent-state updates internally, so no page-side consent plumbing is needed. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-03-20Add VyOS Stream 2026.03Daniil Baturin
2026-03-20Add VyOS Stream 2026.03Daniil Baturin
2026-02-17Merge branch 'main' into productionDaniil Baturin
2026-02-17Add Stream 2026.02Daniil Baturin
2026-01-07Merge branch 'main' of github.com:vyos/community.vyos.netDaniil Baturin
2026-01-07Remove now-EOLd 1.3.x from release statusDaniil Baturin
2026-01-07Update the release status for 1.4.4Daniil Baturin
2026-01-07Merge branch 'production' of github.com:vyos/community.vyos.net into productionDaniil Baturin
2026-01-07Remove now-EOLd 1.3.x from release statusDaniil Baturin
2026-01-07Update the release status for 1.4.4Daniil Baturin
2025-12-24Merge pull request #34 from sever-sever/image-alignmentDaniil Baturin
cosmetic bug: Fix image allign backport
2025-12-24cosmetic bug: Fix image allignViacheslav Hletenko
(cherry picked from commit e8107f90846c7256184983a42a0fc8a3f5f36c66)
2025-11-26Merge pull request #33 from sever-sever/alignDaniil Baturin
cosmetic bug: Fix image alignment
2025-11-26cosmetic bug: Fix image allignViacheslav Hletenko
2025-11-14Add VyOS Stream 2025.11Daniil Baturin
2025-11-14Add VyOS Stream 2025.11Daniil Baturin
2025-07-15Merge pull request #32 from vyos/claChristian Breunig
CI: T7579: fix of the run trigger for CLA
generated by cgit v1.2.3 (git 2.39.1) at 2026-09-01 12:26:55 +0000