| Age | Commit message (Collapse) | Author |
|
(#44)
|
|
|
|
|
|
Mergify ignore_conflicts:true already creates the backport workspace PR +
resolves toward theirs + applies backport-conflict for path-drift conflicts
(verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's
'No backport have been created' trigger never fires under that config.
T8943 / IS-510.
|
|
test: remove mirror backport drift canary file (cleanup)
|
|
Reverts the throwaway file added by the mirror backport drift canary
(#38/#39). The canary completed; file no longer needed.
|
|
test: mirror backport drift verification (2/2)
|
|
|
|
test: mirror backport drift verification (1/2)
|
|
|
|
Source-side wrapper (mirrored to VyOS-Networks/ipaddrcheck) that triggers the
public vyos/.github force_workspace reusable on Mergify backport-conflict
comments. Inert on this public source (owner guard); active on the mirrored
target. force_workspace_enabled is per-consumer (consumers.yaml), default false.
🤖 Generated by [robots](https://vyos.io)
|
|
T8943: ci: add lts-name-check advisory caller
|
|
Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking;
posts a generic advisory if a PR title/body references a release-train branch name.
🤖 Generated by [robots](https://vyos.io)
|
|
Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the
canonical stub. Inclusion + kill-switch logic moves into the central
workflow + consumers.yaml; this wrapper is now a thin pass-through.
Changes from post-1b wrapper:
- branches: [rolling] -> [rolling, production] (heterogeneous fleet)
- permissions: contents:write/pull-requests:write/issues:write ->
contents:read (no side effects in wrapper; central workflow holds
write perms via App tokens — see vyos/.github canonical stub
permissions fix vyos/.github#133)
- Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause
(kill-switch enforced in central workflow's check-consumer-inclusion
+ per-side-effect re-checks)
Spec: /Users/syncer/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3
Permissions fix spec: /Users/syncer/.claude/specs/2026-05-30-canonical-stub-permissions-fix-design.md
Plan: /Users/syncer/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6
Permissions fix plan: /Users/syncer/.claude/plans/2026-05-30-canonical-stub-permissions-fix.md
🤖 Generated by [robots](https://vyos.io)
|
|
PR #33 broke this consumer's mirror with startup_failure. Root cause:
GitHub's reusable-workflow permissions model. The canonical stub set
permissions: contents:read but the central reusable workflow declares
contents:write/pull-requests:write/issues:write at top level. Per docs:
'If you specify the access for any of these scopes at a level less
than the permissions defined by the called workflow, the entire
workflow will fail.'
Restoring the post-1b wrapper while we update the canonical stub
design (either drop central's top-level permissions block, or keep
write perms in the wrapper).
🤖 Generated by [robots](https://vyos.io)
|
|
Per Mirror Pipeline Redesign Rollout 2: standardize the wrapper to the
canonical stub. Inclusion + kill-switch logic moves into the central
workflow + consumers.yaml; this wrapper is now a thin pass-through.
Changes from post-1b wrapper:
- branches: [rolling] -> [rolling, production] (broaden trigger for
heterogeneous default-branch fleet; central + consumers.yaml gate the
actual mirror)
- permissions: contents:write/pull-requests:write/issues:write ->
contents:read (no side effects in wrapper; central workflow holds
write perms via App tokens)
- Remove 'vars.MIRROR_ENABLED != false' gate from wrapper if: clause
(kill-switch now enforced inside check-consumer-inclusion job +
per-side-effect re-checks in process-unmirrored-PR)
Spec: ~/.claude/specs/2026-05-16-mirror-pipeline-redesign-design.md §4.2.3
Plan: ~/.claude/plans/2026-05-17-mirror-pipeline-rollout-2-inclusion-mechanism.md Task 6
🤖 Generated by [robots](https://vyos.io)
|
|
Rollout 1c reference migration on vyos/ipaddrcheck prior to the default-
branch rename. Updates this repo's own trunk references current->rolling:
pr-mirror trigger branches, trigger-rebuild trigger branches (LTS entries
kept), and the AGENTS.md branch-model note. HIGH-producer pins were already
swept to @production in Task 2. Tracking: T8943
|
|
Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github,
vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their
old default branch to the new production compat branch staged in Task 1.
No functional change; pin-ref rewrite only.
Tracking: T8943
|
|
canary) (#30)
Switch from explicit `secrets: PAT/REMOTE_OWNER` pass-through to
`secrets: inherit`, and adopt the uniform stub shape. Behavior-neutral
against the current PAT-using central workflow (`inherit` populates
`PAT`/`REMOTE_OWNER` by name from org-level secrets); prepares for the
App-token central-workflow update (Task 7).
First (canary) consumer of the 25-repo Task 5 migration.
Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5
|
|
coderabbit: T8851: add .coderabbit.yaml for central-config inheritance
|
|
ci(mergify): upgrade configuration to current format
|
|
|
|
|
|
T8852: migrate .github/mergify.yml to extends: mergify
|
|
|
|
general: T8595: switch CLAUDE.md to AGENTS.md (+ Copilot symlink)
|
|
|
|
|
|
|
|
general: T8595: add CLAUDE.md
|
|
T8218: removed unqueue from mergify yaml as it is not supported
|
|
|
|
|
|
|
|
|
|
Agent-Logs-Url: https://github.com/vyos/ipaddrcheck/sessions/25da2a79-0e92-4e88-9505-f89b6f544a86
Co-authored-by: andamasov <12631358+andamasov@users.noreply.github.com>
|
|
|
|
T8531: add Mergify config with commands restrictions
|
|
|
|
|
|
T8403: enabled PR mirroring
|
|
|
|
T8374: convert addresses to the host byte order before comparison in IPv4 range checks
|
|
when checking that the lower boundary of an IPv4 range
is actually lower than the upper bound
|
|
T8218: Updated workflows for pullrequest_target policy change
|
|
policy update
|
|
T7973: do not disallow all-zero host part IPv6 host addresses
|
|
since they are valid unicast addresses, unlike in IPv4
|
|
CI: T7579: fix of the run trigger for CLA
|
|
|