An IPv4 and IPv6 validation utility for use in scripts (mirror of https://github.com/vyos/ipaddrcheck.git) https://git.amelek.net/vyos/ipaddrcheck.git/atom?h=feature%2FT9082-codeql-onboard 2026-07-14T13:03:33+00:00 2026-07-14T13:03:33+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T13:03:33+00:00 urn:sha1:bdc5287aa60b4b7ddcfb1c767d73f151e4797d00 Pre-merge validation complete (legacy autobuild on v4, validation fail-fast, build-mode none — all green; vyos/.github#155 merged). Fleet-standard caller shape. 🤖 Generated by [robots](https://vyos.io) 2026-07-14T12:31:19+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T12:31:19+00:00 urn:sha1:ab872e068723103dba774711241760a217de7697 Removes the deliberate invalid combo; c-cpp extraction via build-mode 'none'. Coverage compared against the step-1 autobuild run per the T9082 canary procedure. 🤖 Generated by [robots](https://vyos.io) 2026-07-14T12:16:02+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T12:16:02+00:00 urn:sha1:0482f011981ea4e63696e8655411fda738bcd1c4 build-mode 'none' + build-command must be rejected by the reusable's validation step before any scanning cost. Reverted in the next commit. 🤖 Generated by [robots](https://vyos.io) 2026-07-14T12:08:07+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T11:50:42+00:00 urn:sha1:5ccf0c1d6dc0d5227b6c0fd2cb1da714f9479fd5 Caller temporarily pinned to the Track-A feature SHA for pre-merge validation; first commit exercises the legacy autobuild path on codeql-action v4. Flipped to @production before merge. 🤖 Generated by [robots](https://vyos.io) 2026-06-02T00:37:28+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-02T00:37:28+00:00 urn:sha1:638f105c50d232b65b780b74cb67be0265f70e88 Mergify ignore_conflicts:true already creates the backport workspace PR + resolves toward theirs + applies backport-conflict for path-drift conflicts (verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's 'No backport have been created' trigger never fires under that config. T8943 / IS-510. 2026-06-01T22:02:49+00:00 Yuriy Andamasov yuriy@vyos.io 2026-06-01T22:02:49+00:00 urn:sha1:ef26d0ce9f1770b397b50f991f7358013cff727c Source-side wrapper (mirrored to VyOS-Networks/ipaddrcheck) that triggers the public vyos/.github force_workspace reusable on Mergify backport-conflict comments. Inert on this public source (owner guard); active on the mirrored target. force_workspace_enabled is per-consumer (consumers.yaml), default false. 🤖 Generated by [robots](https://vyos.io) 2026-06-01T09:34:37+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-01T09:34:37+00:00 urn:sha1:f299c06e3cdcfa0e559ab6006f2c7c4c7f0d8c55 Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking; posts a generic advisory if a PR title/body references a release-train branch name. 🤖 Generated by [robots](https://vyos.io) 2026-05-30T21:58:23+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T21:58:23+00:00 urn:sha1:e5ed2d152a7c12633fa5baefee05a5568a6f5fb1 Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the canonical stub. Inclusion + kill-switch logic moves into the central workflow + consumers.yaml; this wrapper is now a thin pass-through. Changes from post-1b wrapper: - branches: [rolling] -> [rolling, production] (heterogeneous fleet) - permissions: contents:write/pull-requests:write/issues:write -> contents:read (no side effects in wrapper; central workflow holds write perms via App tokens — see vyos/.github canonical stub permissions fix vyos/.github#133) - Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause (kill-switch enforced in central workflow's check-consumer-inclusion + per-side-effect re-checks) Spec: /Users/syncer/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3 Permissions fix spec: /Users/syncer/.claude/specs/2026-05-30-canonical-stub-permissions-fix-design.md Plan: /Users/syncer/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6 Permissions fix plan: /Users/syncer/.claude/plans/2026-05-30-canonical-stub-permissions-fix.md 🤖 Generated by [robots](https://vyos.io) 2026-05-30T20:01:10+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T20:01:10+00:00 urn:sha1:600903ffd8c8eddc28b86b7822797330c5730559 PR #33 broke this consumer's mirror with startup_failure. Root cause: GitHub's reusable-workflow permissions model. The canonical stub set permissions: contents:read but the central reusable workflow declares contents:write/pull-requests:write/issues:write at top level. Per docs: 'If you specify the access for any of these scopes at a level less than the permissions defined by the called workflow, the entire workflow will fail.' Restoring the post-1b wrapper while we update the canonical stub design (either drop central's top-level permissions block, or keep write perms in the wrapper). 🤖 Generated by [robots](https://vyos.io) 2026-05-30T19:57:34+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T19:57:34+00:00 urn:sha1:fd9d9f36de57d63a5ab6435342cc432f73f4d338 Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the canonical stub. Inclusion + kill-switch logic moves into the central workflow + consumers.yaml; this wrapper is now a thin pass-through. Changes from post-1b wrapper: - branches: [rolling] -> [rolling, production] (broaden trigger for heterogeneous default-branch fleet; central + consumers.yaml gate the actual mirror) - permissions: contents:write/pull-requests:write/issues:write -> contents:read (no side effects in wrapper; central workflow holds write perms via App tokens) - Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause (kill-switch now enforced inside check-consumer-inclusion job + per-side-effect re-checks in process-unmirrored-PR) Spec: ~/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3 Plan: ~/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6 🤖 Generated by [robots](https://vyos.io)