summaryrefslogtreecommitdiff
path: root/.github
AgeCommit message (Collapse)Author
8 daysbuild: T9058: add a script for building Squid from sourceDaniil Baturin
11 daysMerge pull request #1235 from vyos/claude/t9047-docker-refChristian Breunig
ci: T9047: dispatch docker-image rebuild against production ref
11 daysci: T9047: grant issues: write to stale workflow token (#1234)Yuriy Andamasov
11 daysci: T9047: dispatch docker-image rebuild against production refYuriy Andamasov
The Docker image rebuild curl-dispatch was still pointed at vyos-reusable-workflows main, which is frozen pre-App-token-migration and still uses the retired secrets.PAT checkout pattern (empty token, immediate "could not read Username" auth failure on every dispatched run since 2026-06-02). The fix already shipped and is live on production (VyOS-Networks/vyos-reusable-workflows#123, merged 2026-05-31) — this caller was simply never repointed. đŸ¤– Generated by [robots](https://vyos.io)
12 daysT9040: Build FIPS-compliant OpenSSL versionViacheslav Hletenko
Build FIPS-compatible OpenSSL binaries The FIPS provider does not get built and installed automatically. To enable it, you need to configure OpenSSL using the `enable-fips` option.
2026-06-29T9029: Switch default branch for CI workflowsAndrii Klymenko
Switch to "production" branch to call the package build workflow.
2026-06-12T861: add secure boot support. Build shim-signed packageasklymenko
2026-06-09salt: T8973: remove package build due to feature removalChristian Breunig
As salt has been marked deprecated via T8056 and is thus deprecated in VyOS 1.5 and VyOS 1.4 it is time to remove it from the rolling release.
2026-06-08T8969: vyos-build failing to build, missing dependenciesasklymenko
2026-06-08T8966: add legacy-label escape to invalid-task-id rule (commit check exempt) ↵Yuriy Andamasov
(#1219)
2026-06-06ci: T8966: exempt bots from product T-ID (invalid-task-id) gate (#1218)Yuriy Andamasov
2026-06-05ci: T8966: add product T-ID title/commit check (opt-in relocation) (#1217)Yuriy Andamasov
2026-06-02chore(mirror): remove force_workspace backport wrapper (R4 mothballed) (#1212)Yuriy Andamasov
Mergify ignore_conflicts:true already creates the backport workspace PR + resolves toward theirs + applies backport-conflict for path-drift conflicts (verified by canary VyOS-Networks/ipaddrcheck#26/#27). force_workspace's 'No backport have been created' trigger never fires under that config. T8943 / IS-510.
2026-06-02ci(mirror-rollout-4): add force_workspace backport companion wrapper (#1211)Yuriy Andamasov
Source-side wrapper (mirrored to the VyOS-Networks twin) for the public vyos/.github force_workspace reusable. Inert on this public source (owner guard); active on the mirror. force_workspace_enabled per-consumer (default false). đŸ¤– Generated by [robots](https://vyos.io)
2026-06-01T8943: ci: add lts-name-check advisory callerYuriy Andamasov
Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking; posts a generic advisory if a PR title/body references a release-train branch name. đŸ¤– Generated by [robots](https://vyos.io)
2026-06-01T8943: migrate pr-mirror wrapper to canonical stub (#1207)Yuriy Andamasov
Mirror Pipeline Rollout 2 Task 6. Uniform canonical wrapper: trigger branches [rolling, production], permissions: contents: read, drop redundant wrapper-level MIRROR_ENABLED guard (now central). đŸ¤– Generated by [robots](https://vyos.io)
2026-06-01T8947: migrate remaining current→rolling residuals (rolling branch) (#1206)Yuriy Andamasov
* T8947: migrate remaining current→rolling residuals on rolling branch Post-1c the default branch is `rolling`, but several build-config values on this branch still referenced the old `current` repo path / codename / train identity. These are not cosmetic — they break the rolling ISO build: - docker/vyos-dev.list: apt source baked into vyos/vyos-build:rolling still pointed at repositories/current (Hit/Err on package builds). Now repositories/rolling + codename `rolling` (verified against live repo: Suite/Codename `rolling`, Components `main`). - data/defaults.toml: vyos_mirror → repositories/rolling; vyos_branch → rolling (build-vyos-image checks out vyos-1x at this branch — `current` no longer exists post-1c); release_train → rolling (apt pin codename + os-release identity). - data/live-build-config/archives/vyos-dev.pref.chroot: Pin codename n=rolling to match the repo. - data/versions: key current→rolling. build-vyos-image looks up version_mapping[git_branch]; git_branch is `rolling`, so the `current` key KeyErrored and the version fell back to 999.<timestamp>. - .github/config/smoketest-branches.json: rolling-train entry key current→rolling (looked up by branch name; was already 404ing on rolling) + mirror + container_image to rolling. os-release impact (intended): rolling images now report VERSION_CODENAME=rolling and "(rolling)" in PRETTY_NAME/VERSION. The -rolling version suffix is hardcoded and unaffected. Companion to Rollout 1c (T8943). Ref IS-504. đŸ¤– Generated by [robots](https://vyos.io) * T8947: finish current→rolling residuals in docs/Dockerfile examples Address adversarial-review findings (Codex) — stale current refs on the rolling branch outside build config: - .github/PULL_REQUEST_TEMPLATE.md: CONTRIBUTING link vyos-1x/blob/current → blob/rolling (was a broken link — vyos-1x renamed current→rolling in 1c). - README.md: "Development Branches" section described the default branch as `current`; updated to `rolling` (dropped the obsolete "may switch to main" note — the rename already happened, to rolling). - docker/Dockerfile: build-example comments vyos-build:current* → vyos-build:rolling*. Ref IS-504, companion to T8943. đŸ¤– Generated by [robots](https://vyos.io)
2026-05-30ci: T8943: migrate branch-name refs current->rolling (rollout 1c) (#1204)Yuriy Andamasov
Tracking: T8943
2026-05-30ci: T8943: sweep HIGH-producer pins to renamed branches (rollout 1c) (#1203)Yuriy Andamasov
Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github, vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their old default branch to the new production compat branch staged in Task 1. No functional change; pin-ref rewrite only. Tracking: T8943
2026-05-30chore: T8937: retire Mergify-replaceable GHA caller workflowsYuriy Andamasov
Replaces 5 caller workflows now superseded by central Mergify rules. See https://vyos.dev/T8937 for the design + spec + plan. Advances: T8937 đŸ¤– Generated by [robots](https://vyos.io)
2026-05-30T8943: migrate mirror wrapper to App-ready uniform stub (rollout 1b Task 5) ↵Yuriy Andamasov
(#1201) Replace legacy per-secret caller with uniform stub that uses secrets: inherit and vars.MIRROR_ENABLED opt-out. No functional change to trigger conditions. Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5 đŸ¤– Generated by [robots](https://vyos.io)
2026-05-14T8852: restore migration to extends after mergeJohn Estabrook
2026-05-14Merge branch 'current' into T8852-mergify-extendsDaniil Baturin
2026-05-13ci(mergify): upgrade configuration to current format (#1182)mergify[bot]
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2026-05-13T8852: migrate .github/mergify.yml to extends: mergifyYuriy Andamasov
2026-05-08Merge pull request #1181 from vyos/T8595-add-agents-mdDaniil Baturin
general: T8595: add AGENTS.md
2026-05-07Merge pull request #1179 from vyos/T8463-currentDaniil Baturin
T8463: Update GitHub actions to latest versions
2026-05-07general: T8595: add AGENTS.mdYuriy Andamasov
2026-05-06T8218: removed unqueue from mergify yaml as it is not supportedkumvijaya
2026-05-06T8463: Update GitHub actions to latest versionsasklymenko
2026-04-26T8531: restrict Mergify commands to maintainers teamYuriy Andamasov
2026-03-29T8444: smoke test workflow checkout to use target branchkumvijaya
2026-03-19T8364: smoke test workflow fixed review commentskumvijaya
2026-03-19T8364: smoke test workflow fixed review commentskumvijaya
2026-03-14T8364: Added iso image build and config load smoke-test workflow fixedkumvijaya
2026-03-14T8364: Added iso image build and config load smoke-test workflowkumvijaya
2026-02-27T8322: add How to test section to PR templateAlex Kudentsov
2026-02-03Merge pull request #1112 from asklymenko/currentDaniil Baturin
T8219: Start building Salt from source
2026-02-02T8218: Fixed pull request branch fetching issue post Github ↵kumvijaya
pull_request_targte policy update
2026-01-29T8219: Start building Salt from sourceasklymenko
2026-01-04T8144: Updated trigger-docker-image-build workflow for pull_request_target ↵kumvijaya
policy change
2025-12-27T8100: updated workflows for pull_request_target policy updateskumvijaya
2025-12-19kea: T8092: Build kea from sourcesarthurdev
2025-10-10T7878: Using mergify rule to handle conflict checks for private repo, ↵kumvijaya
updated label
2025-09-27T7878: Using mergify rule to handle conflict checks for private repokumvijaya
2025-09-20zerotier: T6455: Add zerotier-one to vyos-build pipelinel0crian1
2025-09-20Merge pull request #1037 from kumvijaya/currentChristian Breunig
T7748: Updated conflict reusable workflow reference in workflow
2025-09-18Merge pull request #1033 from sarthurdev/kea3.0Viacheslav Hletenko
kea: T7281: Update Kea to 3.0
2025-09-18T7748: Updated conflict reusable workflow reference in workflowkumvijaya
2025-09-18Merge pull request #1030 from hedrok/T75-remove-pmacctDaniil Baturin
T75: remove pmacct