summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorYuriy Andamasov <yuriy@andamasov.com>2026-05-13 18:34:21 +0300
committerGitHub <noreply@github.com>2026-05-13 18:34:21 +0300
commit3bf4a1c43b62718fd558902fc32bfc16516b7bc3 (patch)
tree98711834881b4d58cd88bc5e337ff75324ecfe4e
parent4dd2af017c9ae219e0ddc9f28836baeec72dd9ed (diff)
parentf67835733d510c7090637fb81b08aa8ae1249e86 (diff)
downloadmergify-3bf4a1c43b62718fd558902fc32bfc16516b7bc3.tar.gz
mergify-3bf4a1c43b62718fd558902fc32bfc16516b7bc3.zip
Merge pull request #5 from vyos/yuriy/cross-org-maintainers
Allow @VyOS-Networks/maintainers to run Mergify commands
-rw-r--r--.mergify.yml23
1 files changed, 23 insertions, 0 deletions
diff --git a/.mergify.yml b/.mergify.yml
index 0fe7ac1..c8750f6 100644
--- a/.mergify.yml
+++ b/.mergify.yml
@@ -91,10 +91,33 @@ pull_request_rules:
- invalid-title
commands_restrictions:
+ # Both Maintainers teams are listed for defense-in-depth.
+ #
+ # This file is consumed by vyos/* repos via the org-local
+ # `extends: mergify` (which resolves to vyos/mergify within the vyos
+ # org). On a vyos repo PR, `@vyos/maintainers` is the local team and
+ # matches normally; `@VyOS-Networks/maintainers` is cross-org and
+ # evaluates to a non-match (Mergify surfaces it as
+ # "Team @VyOS-Networks/maintainers is not part of the organization
+ # vyos") — but does not fail the `or:` rule, so any of the remaining
+ # branches can still match.
+ #
+ # The defense-in-depth case is the cross-org mirror pipeline: if this
+ # file (or any per-repo file copying these conditions) is ever
+ # replicated byte-for-byte to a VyOS-Networks repo without being
+ # migrated to `extends:`, the `@VyOS-Networks/maintainers` entry
+ # ensures VyOS-Networks Maintainers can still issue Mergify commands
+ # on the mirrored PR.
+ #
+ # See VyOS-Networks/vyatta-cfg#33 for the incident that motivated
+ # listing both teams: the T8531 predecessor inline config (single
+ # team, `@vyos/maintainers`) was mirrored to VyOS-Networks/vyatta-cfg
+ # and rejected `@Mergifyio backport` from a VyOS-Networks Maintainer.
backport: &allowed
conditions:
- or:
- sender=@vyos/maintainers
+ - sender=@VyOS-Networks/maintainers
- sender=vyosbot
copy: *allowed
dequeue: *allowed