An IPv4 and IPv6 validation utility for use in scripts (mirror of https://github.com/vyos/ipaddrcheck.git) https://git.amelek.net/vyos/ipaddrcheck.git/atom?h=nos-task-id 2026-08-04T20:33:04+00:00 2026-08-04T20:33:04+00:00 Yuriy Andamasov yuriy@vyos.io 2026-08-04T20:33:04+00:00 urn:sha1:29cec7fa94b63d34f55c8ca55d36e6c91dbafbd4 VD tracker project renamed to NOS (2026-07) - PR titles and commit headlines using the new NOS- key must stop being flagged invalid-task-id; legacy VD- keys stay accepted, and CodeRabbit now resolves NOS alongside VD. Fleet replication of canary vyos/vyos-1x#5379, whose adversarial review tightened the regexes to ASCII [0-9] + literal-space separators. 🤖 Generated by [robots](https://vyos.io) 2026-07-14T15:57:08+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T15:57:08+00:00 urn:sha1:d97e30517b8f13e041af840078cb276be047888e * ci: T9082: onboard CodeQL scanning via central reusable workflow Caller temporarily pinned to the Track-A feature SHA for pre-merge validation; first commit exercises the legacy autobuild path on codeql-action v4. Flipped to @production before merge. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: canary step 2 — deliberate invalid input combo build-mode 'none' + build-command must be rejected by the reusable's validation step before any scanning cost. Reverted in the next commit. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: canary step 3 — final shape (build-mode none) Removes the deliberate invalid combo; c-cpp extraction via build-mode 'none'. Coverage compared against the step-1 autobuild run per the T9082 canary procedure. 🤖 Generated by [robots](https://vyos.io) * ci: T9082: finalize — pin to @production, restore paths filter Pre-merge validation complete (legacy autobuild on v4, validation fail-fast, build-mode none — all green; vyos/.github#155 merged). Fleet-standard caller shape. 🤖 Generated by [robots](https://vyos.io) 2026-06-07T22:47:13+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-07T22:47:13+00:00 urn:sha1:d8ba8e14d3e93aec2225cf97ab935b6197cae90b 2026-06-06T16:00:47+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-06T16:00:47+00:00 urn:sha1:5db51cd1efc7b66b86654a446b6cad63c59c1544 2026-06-05T20:58:38+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-05T20:58:38+00:00 urn:sha1:b8abb7c1867ab792c4bf3581ee72ec9f29308ca2 2026-06-02T00:37:28+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-02T00:37:28+00:00 urn:sha1:638f105c50d232b65b780b74cb67be0265f70e88 Mergify ignore_conflicts:true already creates the backport workspace PR + resolves toward theirs + applies backport-conflict for path-drift conflicts (verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's 'No backport have been created' trigger never fires under that config. T8943 / IS-510. 2026-06-01T22:02:49+00:00 Yuriy Andamasov yuriy@vyos.io 2026-06-01T22:02:49+00:00 urn:sha1:ef26d0ce9f1770b397b50f991f7358013cff727c Source-side wrapper (mirrored to VyOS-Networks/ipaddrcheck) that triggers the public vyos/.github force_workspace reusable on Mergify backport-conflict comments. Inert on this public source (owner guard); active on the mirrored target. force_workspace_enabled is per-consumer (consumers.yaml), default false. 🤖 Generated by [robots](https://vyos.io) 2026-06-01T09:34:37+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-01T09:34:37+00:00 urn:sha1:f299c06e3cdcfa0e559ab6006f2c7c4c7f0d8c55 Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking; posts a generic advisory if a PR title/body references a release-train branch name. 🤖 Generated by [robots](https://vyos.io) 2026-05-30T21:58:23+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T21:58:23+00:00 urn:sha1:e5ed2d152a7c12633fa5baefee05a5568a6f5fb1 Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the canonical stub. Inclusion + kill-switch logic moves into the central workflow + consumers.yaml; this wrapper is now a thin pass-through. Changes from post-1b wrapper: - branches: [rolling] -> [rolling, production] (heterogeneous fleet) - permissions: contents:write/pull-requests:write/issues:write -> contents:read (no side effects in wrapper; central workflow holds write perms via App tokens — see vyos/.github canonical stub permissions fix vyos/.github#133) - Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause (kill-switch enforced in central workflow's check-consumer-inclusion + per-side-effect re-checks) Spec: /Users/syncer/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3 Permissions fix spec: /Users/syncer/.claude/specs/2026-05-30-canonical-stub-permissions-fix-design.md Plan: /Users/syncer/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6 Permissions fix plan: /Users/syncer/.claude/plans/2026-05-30-canonical-stub-permissions-fix.md 🤖 Generated by [robots](https://vyos.io) 2026-05-30T20:01:10+00:00 Yuriy Andamasov yuriy@vyos.io 2026-05-30T20:01:10+00:00 urn:sha1:600903ffd8c8eddc28b86b7822797330c5730559 PR #33 broke this consumer's mirror with startup_failure. Root cause: GitHub's reusable-workflow permissions model. The canonical stub set permissions: contents:read but the central reusable workflow declares contents:write/pull-requests:write/issues:write at top level. Per docs: 'If you specify the access for any of these scopes at a level less than the permissions defined by the called workflow, the entire workflow will fail.' Restoring the post-1b wrapper while we update the canonical stub design (either drop central's top-level permissions block, or keep write perms in the wrapper). 🤖 Generated by [robots](https://vyos.io)