An IPv4 and IPv6 validation utility for use in scripts (mirror of https://github.com/vyos/ipaddrcheck.git) https://git.amelek.net/vyos/ipaddrcheck.git/atom?h=rolling 2026-07-14T15:57:08+00:00 2026-07-14T15:57:08+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T15:57:08+00:00 urn:sha1:d97e30517b8f13e041af840078cb276be047888e * ci: T9082: onboard CodeQL scanning via central reusable workflow Caller temporarily pinned to the Track-A feature SHA for pre-merge validation; first commit exercises the legacy autobuild path on codeql-action v4. Flipped to @production before merge. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: canary step 2 — deliberate invalid input combo build-mode 'none' + build-command must be rejected by the reusable's validation step before any scanning cost. Reverted in the next commit. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: canary step 3 — final shape (build-mode none) Removes the deliberate invalid combo; c-cpp extraction via build-mode 'none'. Coverage compared against the step-1 autobuild run per the T9082 canary procedure. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: finalize — pin to @production, restore paths filter Pre-merge validation complete (legacy autobuild on v4, validation fail-fast, build-mode none — all green; vyos/.github#155 merged). Fleet-standard caller shape. 🤖 Generated by [robots](https://vyos.io) 2026-06-02T00:37:28+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-02T00:37:28+00:00 urn:sha1:638f105c50d232b65b780b74cb67be0265f70e88 Mergify ignore_conflicts:true already creates the backport workspace PR + resolves toward theirs + applies backport-conflict for path-drift conflicts (verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's 'No backport have been created' trigger never fires under that config. T8943 / IS-510. 2026-06-01T22:02:49+00:00 Yuriy Andamasov yuriy@vyos.io 2026-06-01T22:02:49+00:00 urn:sha1:ef26d0ce9f1770b397b50f991f7358013cff727c Source-side wrapper (mirrored to VyOS-Networks/ipaddrcheck) that triggers the public vyos/.github force_workspace reusable on Mergify backport-conflict comments. Inert on this public source (owner guard); active on the mirrored target. force_workspace_enabled is per-consumer (consumers.yaml), default false. 🤖 Generated by [robots](https://vyos.io) 2026-06-01T09:34:37+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-01T09:34:37+00:00 urn:sha1:f299c06e3cdcfa0e559ab6006f2c7c4c7f0d8c55 Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking; posts a generic advisory if a PR title/body references a release-train branch name. 🤖 Generated by [robots](https://vyos.io) 2026-05-30T21:58:23+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T21:58:23+00:00 urn:sha1:e5ed2d152a7c12633fa5baefee05a5568a6f5fb1 Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the canonical stub. Inclusion + kill-switch logic moves into the central workflow + consumers.yaml; this wrapper is now a thin pass-through. Changes from post-1b wrapper: - branches: [rolling] -> [rolling, production] (heterogeneous fleet) - permissions: contents:write/pull-requests:write/issues:write -> contents:read (no side effects in wrapper; central workflow holds write perms via App tokens — see vyos/.github canonical stub permissions fix vyos/.github#133) - Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause (kill-switch enforced in central workflow's check-consumer-inclusion + per-side-effect re-checks) Spec: /Users/syncer/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3 Permissions fix spec: /Users/syncer/.claude/specs/2026-05-30-canonical-stub-permissions-fix-design.md Plan: /Users/syncer/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6 Permissions fix plan: /Users/syncer/.claude/plans/2026-05-30-canonical-stub-permissions-fix.md 🤖 Generated by [robots](https://vyos.io) 2026-05-30T20:01:10+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T20:01:10+00:00 urn:sha1:600903ffd8c8eddc28b86b7822797330c5730559 PR #33 broke this consumer's mirror with startup_failure. Root cause: GitHub's reusable-workflow permissions model. The canonical stub set permissions: contents:read but the central reusable workflow declares contents:write/pull-requests:write/issues:write at top level. Per docs: 'If you specify the access for any of these scopes at a level less than the permissions defined by the called workflow, the entire workflow will fail.' Restoring the post-1b wrapper while we update the canonical stub design (either drop central's top-level permissions block, or keep write perms in the wrapper). 🤖 Generated by [robots](https://vyos.io) 2026-05-30T19:57:34+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T19:57:34+00:00 urn:sha1:fd9d9f36de57d63a5ab6435342cc432f73f4d338 Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the canonical stub. Inclusion + kill-switch logic moves into the central workflow + consumers.yaml; this wrapper is now a thin pass-through. Changes from post-1b wrapper: - branches: [rolling] -> [rolling, production] (broaden trigger for heterogeneous default-branch fleet; central + consumers.yaml gate the actual mirror) - permissions: contents:write/pull-requests:write/issues:write -> contents:read (no side effects in wrapper; central workflow holds write perms via App tokens) - Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause (kill-switch now enforced inside check-consumer-inclusion job + per-side-effect re-checks in process-unmirrored-PR) Spec: ~/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3 Plan: ~/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6 🤖 Generated by [robots](https://vyos.io) 2026-05-30T13:37:13+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T13:37:13+00:00 urn:sha1:8b10585b6534261d934c9760899fe3991c66b0ba Rollout 1c reference migration on vyos/ipaddrcheck prior to the default- branch rename. Updates this repo's own trunk references current->rolling: pr-mirror trigger branches, trigger-rebuild trigger branches (LTS entries kept), and the AGENTS.md branch-model note. HIGH-producer pins were already swept to @production in Task 2. Tracking: T8943 2026-05-30T13:04:42+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T13:04:42+00:00 urn:sha1:ad7bed2ffb5347f4904ca59e7e1527c8e95cc7e7 Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github, vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their old default branch to the new production compat branch staged in Task 1. No functional change; pin-ref rewrite only. Tracking: T8943 2026-05-29T22:53:08+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-29T22:53:08+00:00 urn:sha1:197db74a36cda217555e479ca1059cd2d7b5f3f9 Switch from explicit `secrets: PAT/REMOTE_OWNER` pass-through to `secrets: inherit`, and adopt the uniform stub shape. Behavior-neutral against the current PAT-using central workflow (`inherit` populates `PAT`/`REMOTE_OWNER` by name from org-level secrets); prepares for the App-token central-workflow update (Task 7). First (canary) consumer of the 25-repo Task 5 migration. Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5