vyconf.git, branch rolling

Merge pull request #63 from jestabro/fix-protoc-version

2026-08-10T18:10:00+00:00

T9168: pin version 3.1.1 of ocaml-protoc / pbrt

2026-08-10T17:59:14+00:00

The automated review 0d61bd73fc was incorrect: the files were in fact generated by ocaml-protoc 3.1.1, and that is the stable and tested version for generation/build. Versions of ocaml-protoc / pbrt >= 4.x are not appropriate for regenerating *_pbrt files. However, versions < 3 are not appropriate for building the package.

Merge pull request #62 from vyos/nos-task-id

2026-08-05T09:32:27+00:00

T9164: accept NOS-/VD- Jira keys in task-id check; pin NOS in coderabbit

2026-08-04T22:57:16+00:00

VD tracker project renamed to NOS (2026-07) - PR titles and commit headlines using the new NOS- key must stop being flagged invalid-task-id; legacy VD- keys stay accepted, and CodeRabbit now resolves NOS alongside VD. Fleet replication of canary vyos/vyos-1x#5379, whose adversarial review tightened the regexes to ASCII [0-9] + literal-space separators. 🤖 Generated by [robots](https://vyos.io)

ci: T9082: onboard CodeQL scanning via central reusable workflow (#61)

2026-07-14T17:24:08+00:00

🤖 Generated by [robots](https://vyos.io)

Merge pull request #60 from vyos/ci/add-build-test-workflow

2026-07-03T15:41:11+00:00

T9044: add CI build + test workflow

Update the checkout action to v6

2026-07-03T15:29:12+00:00

T9044: build committed protobuf bindings, skip regeneration

2026-07-02T18:36:12+00:00

Add --ignore-promoted-rules to the CI dune build/runtest steps so the committed src/*_pbt.ml (ocaml-protoc 2.x output) are used instead of re-running the codegen rule. This matches how the package builds under opam (dune build -p implies the same flag), avoiding both the 2.4 CLI mismatch (--ml_out vs -ml_out) and 3.x's incompatible private-record API. 🤖 Generated by [robots](https://vyos.io)

T9044: disable credential persistence on CI checkout

2026-07-02T18:28:50+00:00

Build-only job; set persist-credentials: false so the git token is not left in .git/config for later steps (per zizmor / CodeRabbit). 🤖 Generated by [robots](https://vyos.io)

T9044: constrain ocaml-protoc to 2.x

2026-07-02T18:23:51+00:00

The committed src/*_pbt.ml were generated by ocaml-protoc 2.x. Version 3.0 emits private record types with presence tracking that the hand-written call sites (vyconfd.ml, vyconf_client.ml, vycall_client.ml, vycli.ml) cannot construct, so a fresh toolchain regenerates an incompatible API and the build fails. Pin to < 3.0 until the generated code and call sites are migrated to the 3.x API. 🤖 Generated by [robots](https://vyos.io)