mergify.git, branch production

ci: add WIP-label merge protection (bot/mirror-exempt) (#20)

2026-06-06T19:01:52+00:00

Add a merge_protection that blocks merge while a maintainer-applied WIP label is present. Bot authors (mirror pipeline vyos-bot, mergify, copilot, vyosbot) are exempt via the if: scope, so cross-org mirror PRs to rolling are never held. Same shape as the existing label gates; has teeth once the Mergify Merge Protections check is made required (T8850 Cat 1). Mergify does not auto-merge in this fleet, so today this is an advisory check-run. 🤖 Generated by [robots](https://vyos.io)

ci: T8966: exempt bots from invalid-title + invalid-body convention gates (#19)

2026-06-06T15:43:37+00:00

Add the blessed 3-condition bot exclusion (-author~=\[bot\]$, author!=copilot-swe-agent, author!=vyosbot) to the two convention labeling rules so bot-authored PRs aren't gated by human title/body conventions. Mirrors the live Auto-assign PR author rule. Part of the uniform bot-excluded protections rollout (IS-531). 🤖 Generated by [robots](https://vyos.io)

ci: T8966: flip central to loose title + body checks (strict T-ID now per-repo) (#18)

2026-06-06T06:37:51+00:00

ci: T8966: add dormant invalid-task-id merge gate (#17)

2026-06-05T20:19:57+00:00

🤖 Generated by [robots](https://vyos.io)

ci: T8943: additive rolling/production label rules for rollout 1c (#16)

2026-05-30T13:19:31+00:00

Tracking: T8943

Merge pull request #15 from vyos/feature/T8937-central-additions

2026-05-28T14:39:06+00:00

feat: add base-branch labeling + author-assign rules (T8937)

2026-05-28T13:17:47+00:00

Adds 5 new pull_request_rules to the central Mergify config: - 4× Label PR with — replaces vyos/.github:add-pr-labels.yml (consumes the same base→label mapping from labeler.yml). Uses toggle: for base-retarget cleanup; omits -closed so labels persist post-merge for triage history. - 1× Auto-assign PR author — replaces vyos/.github:assign-author.yml. Uses -author~=\[bot\]$ to skip GitHub App-bot identities, plus explicit exceptions for copilot-swe-agent and vyosbot (legacy PAT). PR stale migration was DEFERRED (see Phorge T8937 + spec §2) because Mergify's own label/comment activity bumps updated_at, producing a self-unstaling cycle that breaks parity with actions/stale@v10. PR + issue stale stay in vyos/.github:check-stale.yml. Advances: T8937 🤖 Generated by [robots](https://vyos.io)

Merge pull request #13 from vyos/feature/auto-close-eol-branches

2026-05-28T10:22:08+00:00

feat(close): auto-close PRs targeting EOL release branches (sagitta, crux, circinus)

Merge pull request #14 from vyos/feature/T8935-merge-protections

2026-05-28T10:21:41+00:00

mergify: T8935: gate merge on conflicts + invalid-title labels

feat(close): auto-close PRs targeting EOL release branches

2026-05-28T10:16:03+00:00

Add a `pull_request_rules` entry that closes every PR (and Mergify- created backport) opened against the EOL release branches `sagitta`, `crux`, or `circinus` in any vyos/* repo extending this config. Excludes vyos-documentation (still accepts per-branch docs backports to sagitta and circinus) and vyos.vyos (Ansible Galaxy collection on `main`; listed defensively). Replaces vyos/vyos-1x:.github/workflows/pr-auto-close.yml, which only covered sagitta. Centralizing in Mergify removes per-repo workflow drift and extends coverage to crux and circinus. Uses Mergify's `repository-name` condition attribute (bare repo name, no org prefix) — unambiguous because this central config is consumed only by vyos/* repos via `extends: mergify`.