| Age | Commit message (Collapse) | Author |
|---|
|
|
|
Add --ignore-promoted-rules to the CI dune build/runtest steps so the
committed src/*_pbt.ml (ocaml-protoc 2.x output) are used instead of
re-running the codegen rule. This matches how the package builds under
opam (dune build -p implies the same flag), avoiding both the 2.4 CLI
mismatch (--ml_out vs -ml_out) and 3.x's incompatible private-record API.
🤖 Generated by [robots](https://vyos.io)
|
|
Build-only job; set persist-credentials: false so the git token is not
left in .git/config for later steps (per zizmor / CodeRabbit).
🤖 Generated by [robots](https://vyos.io)
|
|
vyos1x-config's src/dune links containers but its opam file omits it, so
the git-pinned build fails with 'Library containers not found'. Install
it explicitly in CI until vyos1x-config.opam declares it upstream.
🤖 Generated by [robots](https://vyos.io)
|
|
Add .github/workflows/build.yml running dune build + dune runtest on
push and PR to rolling, across an OCaml 4.14 + 5.2 matrix via
ocaml/setup-ocaml@v3. vyos1x-config is pinned from git before the
dependency solve since it is not on the default opam repository.
Also fix vyconf.opam: add the missing vyos1x-config and yojson
dependencies (both linked directly in src/dune) and drop the
duplicate toml entry.
🤖 Generated by [robots](https://vyos.io)
|
|
(#57)
|
|
|
|
|
|
Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking;
posts a generic advisory if a PR title/body references a release-train branch name.
🤖 Generated by [robots](https://vyos.io)
|
|
Mirror Pipeline Rollout 2 Task 6. Uniform canonical wrapper:
trigger branches [rolling, production], permissions: contents: read,
drop redundant wrapper-level MIRROR_ENABLED guard (now central).
🤖 Generated by [robots](https://vyos.io)
|
|
Tracking: T8943
|
|
Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github,
vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their
old default branch to the new production compat branch staged in Task 1.
No functional change; pin-ref rewrite only.
Tracking: T8943
|
|
(#49)
Replaces legacy PAT-based mirror caller with the uniform App-ready stub.
Drops hardcoded PAT/REMOTE_OWNER secrets in favour of `secrets: inherit`
and adds MIRROR_ENABLED opt-out guard.
Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5
🤖 Generated by [robots](https://vyos.io)
|
|
* T8615: add Mergify config (extends: mergify central template)
Adds the org-local central-config inheritance file per the T8615 sweep
(re-scoped 2026-05-28). 4-line minimum: extends: mergify resolves to
vyos/mergify which provides commands_restrictions (9 slash commands x
4-sender allowlist), conflict labeler, PR-title T-ID format check,
opt-in auto-update, and the backport-conflict merge protection.
merge_protections_settings: reporting_method: check-runs declared
explicitly per-repo because only defaults and commands_restrictions are
documented as merging across extends: -- pin to current behavior pre
the 2026-07-31 default flip per data/github.md Mergify gotchas table.
Phase 0 CR: 0 finding(s). Known false positive: CR flags
extends: mergify as 'not a documented built-in preset' but Mergify
documents the org-local form at https://docs.mergify.com/configuration/sharing/.
Refs: T8615 (re-scoped 2026-05-28), IS-421
Generated by robots https://vyos.io
* T8615: switch yaml-language-server schema URL to JSON-schema
Replaces the human-docs file-format URL (which serves HTML and cannot
drive editor validation) with the machine-readable JSON-schema URL
that yaml-language-server actually resolves for autocomplete and
schema validation.
Old: https://docs.mergify.com/configuration/file-format/
New: https://docs.mergify.com/mergify-configuration-schema.json
Phase 0 CR: 0 finding(s).
Refs: T8615 (re-scoped 2026-05-28), IS-421
Generated by robots https://vyos.io
|
|
|
|
|
|
|
|
|
