shim-signed.git, branch rollingVyOS code for the shim-signed package (mirror of https://github.com/vyos/shim-signed.git)
https://git.amelek.net/vyos/shim-signed.git/atom?h=rolling2026-06-07T22:51:54+00:00Merge pull request #2 from vyos/feat/T8966-legacy-escape2026-06-07T22:51:54+00:00Yuriy Andamasovyuriy@andamasov.com2026-06-07T22:51:54+00:00urn:sha1:45e30eda416944eff2157f77c0aeb8fc5279b87f
T8966: add legacy-label escape to invalid-task-id rule (commit check exempt)T8966: add legacy-label escape to invalid-task-id rule (commit check exempt)2026-06-07T22:48:42+00:00Yuriy Andamasovyuriy@andamasov.com2026-06-07T22:48:42+00:00urn:sha1:5c0b264cc3300dd61e60a1bdf71a36530bd565fdMerge pull request #1 from vyos/feat/extends-mergify-t89662026-06-07T07:56:45+00:00Yuriy Andamasovyuriy@andamasov.com2026-06-07T07:56:45+00:00urn:sha1:ead48f4715faff01f36b8566b7b892707ed36520
T8966: extends central vyos/mergify + product T-ID ruleT8966: extends central vyos/mergify + product T-ID rule2026-06-07T07:55:54+00:00Yuriy Andamasovyuriy@vyos.io2026-06-07T07:55:54+00:00urn:sha1:02adcaafd9d67627601f7083eca09be3df792bfc
Onboard vyos/shim-signed to the central Mergify baseline via
`extends: mergify` and add the bot-excluded per-repo
`invalid-task-id` rule, matching the 49-repo IS-531 product fleet.
The 5 merge-protection gate labels were pre-created. Products
already enabled; no central-config change. Validated via the
Mergify config-simulator (200 OK). Rule body byte-identical to
the fleet canonical.
🤖 Generated by [robots](https://vyos.io)
Add signed SHIM binary including the VyOS Networks CA certificate2026-06-01T18:24:12+00:00Christian Breunigchristian@breunig.cc2026-06-01T18:23:20+00:00urn:sha1:dc02d90e677b796bb4814e069f1cfb0856d95147Fix up stupid omission in the previous package upload2026-05-19T22:45:00+00:00Steve McIntyresteve@einval.com2026-05-19T22:45:00+00:00urn:sha1:d94c2b0f2abfe9873e0ebad99a43f9b160397df3
the changes in 1.49 did not take into account the "SecureBoot enabled"
case when adding a default error trap. Closes: #1137098, #1137101.
Make mokutil parsing more robust. Closes: #11370632026-05-19T08:43:36+00:00Steve McIntyresteve@einval.com2026-05-19T08:43:36+00:00urn:sha1:1c4e702c99a185924a847ba464cd2205796ecce2
Cope with "Platform is in Setup Mode" message
If we get any other unexpected output, print what we got for debugging.
Make sure we remove shim-signed.preinst during clean2026-05-18T13:35:25+00:00Steve McIntyresteve@einval.com2026-05-18T13:32:43+00:00urn:sha1:df6d46ce5a1bd5f7548daca14884905074383e4fUpdate changelog and release 1.482026-05-18T13:12:28+00:00Steve McIntyresteve@einval.com2026-05-18T13:12:28+00:00urn:sha1:409da09ec16bd2a28041db9608661a7f8fc7ec37Tweak the URI linked for CA updates2026-05-18T13:06:58+00:00Steve McIntyresteve@einval.com2026-05-18T13:06:58+00:00urn:sha1:0f5a44c8169294fd1362ee6d018f93a76f0d1f05