summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@vyos.io>2026-06-01 02:42:27 +0300
committerYuriy Andamasov <yuriy@vyos.io>2026-06-01 02:42:27 +0300
commit3e5c9445ee83b5a6d28a50ce9966cfdb6b35ae84 (patch)
tree214feb0afef8a56946c6298e3fdc42dd53639a8a
parent98348eb9b1a4d6a1beae3a905d3af61c3cfe0ea6 (diff)
downloadlibnss-tacplus-claude/T8943-canonical-wrapper-plus-mergify.tar.gz
libnss-tacplus-claude/T8943-canonical-wrapper-plus-mergify.zip
T8943: migrate pr-mirror wrapper to canonical stub + add extends:mergify configclaude/T8943-canonical-wrapper-plus-mergify
libnss-tacplus was the last consumers.yaml repo on the pre-1b custom wrapper (choice-typed dispatch, write perms, divergent job name) AND was missing the .github/mergify.yml that the mirror target already carries. This PR brings the source to the full desired state so the mirror reconciles the diverged target without losing the target-side Mergify config (preserved in backup branch backup/pre-libnss-tacplus-reconcile-20260531). 🤖 Generated by [robots](https://vyos.io)
-rw-r--r--.github/mergify.yml4
-rw-r--r--.github/workflows/pr-mirror-repo-sync.yml30
2 files changed, 15 insertions, 19 deletions
diff --git a/.github/mergify.yml b/.github/mergify.yml
new file mode 100644
index 0000000..525594c
--- /dev/null
+++ b/.github/mergify.yml
@@ -0,0 +1,4 @@
+# yaml-language-server: $schema=https://docs.mergify.com/mergify-configuration-schema.json
+extends: mergify
+merge_protections_settings:
+ reporting_method: check-runs
diff --git a/.github/workflows/pr-mirror-repo-sync.yml b/.github/workflows/pr-mirror-repo-sync.yml
index 7741a36..0f16633 100644
--- a/.github/workflows/pr-mirror-repo-sync.yml
+++ b/.github/workflows/pr-mirror-repo-sync.yml
@@ -1,35 +1,27 @@
+# .github/workflows/pr-mirror-repo-sync.yml
+# DO NOT EDIT — managed by mirror-pipeline rollout.
+# To opt out: set vars.MIRROR_ENABLED=false in this repo's Actions variables.
name: PR Mirror and Repo Sync
on:
pull_request_target:
types: [closed]
- branches: [rolling]
+ branches: [rolling, production]
workflow_dispatch:
inputs:
sync_branch:
- description: 'Branch to mirror'
required: true
- default: 'rolling'
- type: choice
- options:
- - rolling
+ type: string
permissions:
- pull-requests: write
- contents: write
- issues: write
+ contents: read
jobs:
- call-pr-mirror-repo-sync:
+ call:
if: |
- github.repository_owner == 'vyos' &&
- (
- github.event_name == 'workflow_dispatch' ||
- (github.event_name == 'pull_request_target' && github.event.pull_request.merged == true)
- )
+ github.repository_owner == 'vyos'
+ && (github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch')
uses: vyos/.github/.github/workflows/pr-mirror-repo-sync.yml@production
with:
- sync_branch: ${{ github.event.inputs.sync_branch || 'rolling' }}
- secrets:
- PAT: ${{ secrets.PAT }}
- REMOTE_OWNER: ${{ secrets.REMOTE_OWNER }}
+ sync_branch: ${{ inputs.sync_branch || github.event.pull_request.base.ref }}
+ secrets: inherit