summaryrefslogtreecommitdiff
path: root/.github
AgeCommit message (Collapse)Author
2026-07-07Merge pull request #151 from vyos/claude/t9047-codeql-guardrollingAndrii Klymenko
ci: T9047: skip CodeQL on mirror twins (Code Security not enabled on private org)
2026-07-03ci: T9047: grant issues: write to stale workflow token (#150)Yuriy Andamasov
2026-07-03ci: T9047: skip CodeQL on mirror twins (Code Security not enabled on private ↡Yuriy Andamasov
org)
2026-06-08T8966: add legacy-label escape to invalid-task-id rule (commit check exempt) ↡Yuriy Andamasov
(#149)
2026-06-06ci: T8966: exempt bots from product T-ID (invalid-task-id) gate (#148)Yuriy Andamasov
2026-06-05ci: T8966: add product T-ID title/commit check (opt-in relocation) (#147)Yuriy Andamasov
2026-06-02chore(mirror): remove force_workspace backport wrapper (R4 mothballed) (#146)Yuriy Andamasov
Mergify ignore_conflicts:true already creates the backport workspace PR + resolves toward theirs + applies backport-conflict for path-drift conflicts (verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's 'No backport have been created' trigger never fires under that config. T8943 / IS-510.
2026-06-02ci(mirror-rollout-4): add force_workspace backport companion wrapper (#145)Yuriy Andamasov
Source-side wrapper (mirrored to the VyOS-Networks twin) for the public vyos/.github force_workspace reusable. Inert on this public source (owner guard); active on the mirror. force_workspace_enabled per-consumer (default false). πŸ€– Generated by [robots](https://vyos.io)
2026-06-01T8943: ci: add lts-name-check advisory callerYuriy Andamasov
Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking; posts a generic advisory if a PR title/body references a release-train branch name. πŸ€– Generated by [robots](https://vyos.io)
2026-06-01T8943: migrate pr-mirror wrapper to canonical stub (#142)Yuriy Andamasov
Mirror Pipeline Rollout 2 Task 6. Uniform canonical wrapper: trigger branches [rolling, production], permissions: contents: read, drop redundant wrapper-level MIRROR_ENABLED guard (now central). πŸ€– Generated by [robots](https://vyos.io)
2026-05-30ci: T8943: migrate branch-name refs current->rolling (rollout 1c) (#141)Yuriy Andamasov
Tracking: T8943
2026-05-30ci: T8943: sweep HIGH-producer pins to renamed branches (rollout 1c) (#140)Yuriy Andamasov
Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github, vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their old default branch to the new production compat branch staged in Task 1. No functional change; pin-ref rewrite only. Tracking: T8943
2026-05-30T8943: migrate mirror wrapper to App-ready uniform stub (rollout 1b Task 5) ↡HEADcurrentYuriy Andamasov
(#139) Switches to secrets:inherit (no explicit PAT/REMOTE_OWNER) and adds MIRROR_ENABLED kill-switch via vars. Behavior-neutral β€” same trigger conditions, same reusable workflow target. Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5 πŸ€– Generated by [robots](https://vyos.io)
2026-05-28chore: T8937: retire Mergify-replaceable GHA caller workflowsYuriy Andamasov
Replaces 5 caller workflows now superseded by central Mergify rules. See https://vyos.dev/T8937 for the design + spec + plan. Advances: T8937 πŸ€– Generated by [robots](https://vyos.io)
2026-05-16ci(mergify): upgrade configuration to current formatmergify[bot]
2026-05-13T8852: migrate .github/mergify.yml to extends: mergifyYuriy Andamasov
Replace the inline T8531 predecessor config with `extends: mergify`, deferring to the per-org central baseline (vyos/mergify on the vyos side, VyOS-Networks/mergify on the mirror). The old config hardcoded `sender=@vyos/maintainers` in `commands_restrictions`. The cross-org mirror pipeline replicates this file byte-for-byte to VyOS-Networks/vyatta-cfg, where the team reference is invalid (different org). Result: `@Mergifyio backport` was rejected on every VyOS-Networks/vyatta-cfg mirror PR with "Team @vyos/maintainers is not part of the organization VyOS-Networks" β€” see VyOS-Networks/vyatta-cfg#33. After this change, `extends: mergify` resolves to the per-org central config on each side, picking up the correct Maintainers team automatically. Backport to circinus and sagitta after merge β€” those branches carry the same legacy file. πŸ€– Generated by [robots](https://vyos.io)
2026-05-09ci: T8834: remove SonarCloud workflowYuriy Andamasov
πŸ€– Generated by robots (https://vyos.io)
2026-05-07general: T8595: add AGENTS.mdYuriy Andamasov
2026-05-07T8218: removed unqueue from mergify yaml as it is not supportedkumvijaya
2026-04-26T8531: restrict Mergify commands to maintainers teamYuriy Andamasov
2026-01-06T8144: Updated workflows for pullrequest_target policy changekumvijaya
2025-10-18T7878: conflict check updated to use mergifykumvijaya
2025-07-19T7619: Removed REMOTE_REPO var from mirror workflowkumvijaya
2025-07-18T7640: added pr mirroringkumvijaya
2025-07-14T7579: fix of the run trigger for CLAYevhen Bondarenko
2025-07-04T7579: added workflow for CLAclalemeshovich
2025-05-24T7445: added open prs conflict check workflowkumvijaya
2024-09-17T6722: removed py check workflowskumvijaya
2024-09-17T6722: updated to use reusable workflowskumvijaya
2024-09-14T6674: Action add trigger workflow to rebuild packageViacheslav Hletenko
2024-03-24make related tasks optionalRobert GΓΆhler
2023-12-17GitHub: update workflowsChristian Breunig
2022-11-10configuring security scanYuriy Andamasov