(mirror of https://github.com/vyos/libtacplus-map.git) https://git.amelek.net/vyos/libtacplus-map.git/atom?h=feature%2FT9082-codeql-onboard 2026-07-14T12:17:34+00:00 2026-07-14T12:17:34+00:00 Yuriy Andamasov yuriy@vyos.io 2026-07-14T12:17:34+00:00 urn:sha1:59bf9d9341604ebe22558977ebc6250aaad9c3d4 🤖 Generated by [robots](https://vyos.io) 2026-06-07T22:48:13+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-07T22:48:13+00:00 urn:sha1:80418f9248aa7a9c241e9e040e94327b5d6a3700 2026-06-06T16:03:03+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-06T16:03:03+00:00 urn:sha1:af3d94c152f99b0adb588620d85d922d1e2d27b6 2026-06-05T21:00:59+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-05T21:00:59+00:00 urn:sha1:d01196e20d75499574dafc62a4eaebcfaf3dee67 2026-06-01T09:35:08+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-06-01T09:35:08+00:00 urn:sha1:6eda711a5231234778d29243a7b74207601f7657 Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking; posts a generic advisory if a PR title/body references a release-train branch name. 🤖 Generated by [robots](https://vyos.io) 2026-05-31T22:42:22+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-05-31T22:42:22+00:00 urn:sha1:9c947c0469578a1375107ff562e7a5247c2bfeec Mirror Pipeline Rollout 2 Task 6. Uniform canonical wrapper: trigger branches [rolling, production], permissions: contents: read, drop redundant wrapper-level MIRROR_ENABLED guard (now central). 🤖 Generated by [robots](https://vyos.io) 2026-05-30T15:38:08+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-05-30T15:38:08+00:00 urn:sha1:1deb82fb105bc64e934f34b50a978c6b2e8fbd1f Tracking: T8943 2026-05-30T13:05:05+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-05-30T13:05:05+00:00 urn:sha1:4f59b44a928ab84c5f7d5a5e2cc9ca388d41c9b1 Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github, vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their old default branch to the new production compat branch staged in Task 1. No functional change; pin-ref rewrite only. Tracking: T8943 2026-05-29T23:41:22+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-05-29T23:41:22+00:00 urn:sha1:02f8f02b85d05424f274e458ce5d6bea5b039109 Replaces legacy PAT-based wrapper with the uniform App-ready stub. Uses `secrets: inherit` and `vars.MIRROR_ENABLED` opt-out guard. Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5 🤖 Generated by [robots](https://vyos.io) 2026-05-28T10:08:15+00:00 Yuriy Andamasov yuriy@andamasov.com 2026-05-28T10:08:15+00:00 urn:sha1:10950fd83b337f07544940b2b0591cf5a59edee2 * T8615: add Mergify config (extends: mergify central template) Adds the org-local central-config inheritance file per the T8615 sweep (re-scoped 2026-05-28). 4-line minimum: extends: mergify resolves to vyos/mergify which provides commands_restrictions (9 slash commands x 4-sender allowlist), conflict labeler, PR-title T-ID format check, opt-in auto-update, and the backport-conflict merge protection. merge_protections_settings: reporting_method: check-runs declared explicitly per-repo because only defaults and commands_restrictions are documented as merging across extends: -- pin to current behavior pre the 2026-07-31 default flip per data/github.md Mergify gotchas table. Phase 0 CR: 0 finding(s). Known false positive: CR flags extends: mergify as 'not a documented built-in preset' but Mergify documents the org-local form at https://docs.mergify.com/configuration/sharing/. Refs: T8615 (re-scoped 2026-05-28), IS-421 Generated by robots https://vyos.io * T8615: switch yaml-language-server schema URL to JSON-schema Replaces the human-docs file-format URL (which serves HTML and cannot drive editor validation) with the machine-readable JSON-schema URL that yaml-language-server actually resolves for autocomplete and schema validation. Old: https://docs.mergify.com/configuration/file-format/ New: https://docs.mergify.com/mergify-configuration-schema.json Phase 0 CR: 0 finding(s). Refs: T8615 (re-scoped 2026-05-28), IS-421 Generated by robots https://vyos.io