| Age | Commit message (Collapse) | Author |
|
(#17)
|
|
|
|
|
|
T8943: ci: add lts-name-check advisory caller
|
|
Adds the source-side LTS-name advisory caller (mirror-pipeline). Non-blocking;
posts a generic advisory if a PR title/body references a release-train branch name.
🤖 Generated by [robots](https://vyos.io)
|
|
Mirror Pipeline Rollout 2 Task 6. Uniform canonical wrapper:
trigger branches [rolling, production], permissions: contents: read,
drop redundant wrapper-level MIRROR_ENABLED guard (now central).
🤖 Generated by [robots](https://vyos.io)
|
|
Tracking: T8943
|
|
Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github,
vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their
old default branch to the new production compat branch staged in Task 1.
No functional change; pin-ref rewrite only.
Tracking: T8943
|
|
(#10)
Replace PAT-based explicit secrets with App-ready `secrets: inherit` stub.
Adds MIRROR_ENABLED opt-out guard and uniform job/input naming per rollout spec.
Plan: ~/.claude/plans/2026-05-26-mirror-rollout-1b-revised.md Task 5
🤖 Generated by [robots](https://vyos.io)
|
|
* T8615: add Mergify config (extends: mergify central template)
Adds the org-local central-config inheritance file per the T8615 sweep
(re-scoped 2026-05-28). 4-line minimum: extends: mergify resolves to
vyos/mergify which provides commands_restrictions (9 slash commands x
4-sender allowlist), conflict labeler, PR-title T-ID format check,
opt-in auto-update, and the backport-conflict merge protection.
merge_protections_settings: reporting_method: check-runs declared
explicitly per-repo because only defaults and commands_restrictions are
documented as merging across extends: -- pin to current behavior pre
the 2026-07-31 default flip per data/github.md Mergify gotchas table.
Phase 0 CR: 0 finding(s). Known false positive: CR flags
extends: mergify as 'not a documented built-in preset' but Mergify
documents the org-local form at https://docs.mergify.com/configuration/sharing/.
Refs: T8615 (re-scoped 2026-05-28), IS-421
Generated by robots https://vyos.io
* T8615: switch yaml-language-server schema URL to JSON-schema
Replaces the human-docs file-format URL (which serves HTML and cannot
drive editor validation) with the machine-readable JSON-schema URL
that yaml-language-server actually resolves for autocomplete and
schema validation.
Old: https://docs.mergify.com/configuration/file-format/
New: https://docs.mergify.com/mergify-configuration-schema.json
Phase 0 CR: 0 finding(s).
Refs: T8615 (re-scoped 2026-05-28), IS-421
Generated by robots https://vyos.io
|
|
coderabbit: T8851: add .coderabbit.yaml for central-config inheritance
|
|
|
|
T8835: added pr mirror workflow
|
|
|
|
|
|
general: T8595: add AGENTS.md
|
|
|
|
|
|
|
|
CI: T7579: fix of the run trigger for CLA
|
|
|
|
T7579: added workflow for CLA
|
|
|
|
T5522: Add logging for which mksquashfs syntax is being used
|
|
|
|
because Debian's own code isn't passing it
|
|
|
|
|
|
|
|
Those need a block size of 4k to work.
|
|
|
|
This adds support for dm-vertiy on the root filesystem.
Currently only squashfs is supported.
Three new flags are introduced.
* --dm-verity: Enable basic dm-verity support
* --dm-verity-fec NB_ROOTS: Enable forward error correction. Optional
* --dm-verity-sign SCRIPT: Specify signing script for the root hash. Optional
|
|
|
|
|
|
Let's see if everything works now.
|
|
|
|
Contents-all.gz does not seem to exist on Buster, so don't fail if
wget doesn't find the file.
Closes: #986278
|
|
|
|
No longer required.
Closes: #986148
|
|
E: live-build: possible-missing-colon-in-closes
Gbp-Dch: ignore
|
|
|
|
|
|
See for more details https://lists.debian.org/debian-live/2021/03/msg00008.html
|
|
1) lb config rejected multiple checksum types
2) When using the installer, cdrom-checker requires a md5 checksum file,
use 'Check the integrity of the installation media' in the installer
3) The comments in the first lines of the checksum files caused
cdrom-checker to fail the integrity of the image
|
|
Closes #964914
|
|
|
|
Explicitly documented updated conditional, as "-t" is not a
commonly seen shell test.
|
|
|
|
|
|
Use the hexadecimal version of SOURCE_DATE_EPOCH, limited to the lower 32 bits
|