From 036b9842fabb99752543a9bd6bddc4bbff4f4a1e Mon Sep 17 00:00:00 2001
From: Yuriy Andamasov <yuriy@vyos.io>
Date: Fri, 5 Jun 2026 23:19:57 +0300
Subject: ci: T8966: add dormant invalid-task-id merge gate (#17)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

🤖 Generated by [robots](https://vyos.io)
---
 .mergify.yml | 15 +++++++++++++++
 1 file changed, 15 insertions(+)

diff --git a/.mergify.yml b/.mergify.yml
index 9f161fa..b58aa54 100644
--- a/.mergify.yml
+++ b/.mergify.yml
@@ -449,5 +449,20 @@ merge_protections:
       - label = invalid-title
     success_conditions:
       - label != invalid-title
+
+  # Dormant for non-product repos (the `if:` never matches where the label is
+  # never set). Activated per-repo by the `Flag product T-ID format violation
+  # in PR title or commit messages` rule that product repos add to their own
+  # .github/mergify.yml (rollout T8966 / IS-529). Added BEFORE the per-repo
+  # rules so `invalid-task-id` blocks the moment a product repo sets it.
+  - name: invalid-task-id label must be absent to merge
+    description: >
+      Block merge while the invalid-task-id label is present. Set by the
+      per-repo product T-ID rule (product repos only); dormant where the
+      label is never applied.
+    if:
+      - label = invalid-task-id
+    success_conditions:
+      - label != invalid-task-id
 merge_protections_settings:
   reporting_method: check-runs
-- 
cgit v1.2.3