vyos.vyos.git/.github, branch dependabot/github_actions/codecov/codecov-action-7.0.0

Bump codecov/codecov-action from 5.5.5 to 7.0.0

2026-08-17T19:28:05+00:00

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5.5.5 to 7.0.0. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Commits](https://github.com/codecov/codecov-action/compare/v5.5.5...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot]

T9220: ci: upload JUnit test results to Codecov Test Analytics (#497)

2026-08-17T07:58:14+00:00

* T9220: ci: upload JUnit test results to Codecov Test Analytics (probe) Wire pytest JUnit XML output and a pinned codecov-action@v5.5.5 test-results upload step (tokenless, informational) as the public-class PF-B probe for the Codecov Test Analytics fleet rollout. 🤖 Generated by [robots](https://vyos.io) * T9220: ci: continue-on-error on test-results upload (informational posture) A step timeout would fail the job despite fail_ci_if_error: false; continue-on-error keeps the upload strictly informational. 🤖 Generated by [robots](https://vyos.io) * T9220: ci: fold test-results upload condition (yaml line-length) 🤖 Generated by [robots](https://vyos.io)

T9164: accept NOS-/VD- Jira keys in task-id check; pin NOS in coderabbit

2026-08-04T22:55:47+00:00

VD tracker project renamed to NOS (2026-07) - PR titles and commit headlines using the new NOS- key must stop being flagged invalid-task-id; legacy VD- keys stay accepted, and CodeRabbit now resolves NOS alongside VD. Fleet replication of canary vyos/vyos-1x#5379, whose adversarial review tightened the regexes to ASCII [0-9] + literal-space separators. 🤖 Generated by [robots](https://vyos.io)

Bump actions/setup-python from 6 to 7 (#490)

2026-07-30T22:28:36+00:00

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6 to 7. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

ci: T9082: onboard CodeQL scanning (#488)

2026-07-14T19:42:23+00:00

* ci: T9082: onboard CodeQL scanning via central reusable workflow 🤖 Generated by [robots](https://vyos.io) * ci: T9082: add trivial changelog fragment for the CodeQL workflow 🤖 Generated by [robots](https://vyos.io)

Bump codecov/codecov-action from 6 to 7

2026-06-08T19:03:15+00:00

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 6 to 7. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v6...v7) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot]

T8966: add legacy-label escape to invalid-task-id rule (commit check exempt) (#483)

2026-06-07T22:34:47+00:00

The per-repo T-ID rule flagged every commit's first line, but on repos that squash-merge AND block force-push (vyos.vyos enforces non_fast_forward on ~ALL branches, zero bypass) authors cannot rewrite history to make existing commits conform. The label became unclearable. Keep the title check (always fixable), and exempt the per-commit check when a maintainer applies the new `legacy` label. New PRs are still nudged toward the convention. 🤖 Generated by [robots](https://vyos.io)

ci: T8966: exempt bots from product T-ID (invalid-task-id) gate (#482)

2026-06-06T16:02:37+00:00

ci: T8966: add product T-ID title/commit check (opt-in relocation) (#481)

2026-06-05T21:00:34+00:00

ci: T8943: sweep HIGH-producer pins to renamed branches (rollout 1c) (#477)

2026-05-30T13:06:21+00:00

Rewrites uses: pins to the three HIGH-fanout producers (vyos/.github, vyos/vyos-cla-signatures, VyOS-Networks/vyos-reusable-workflows) from their old default branch to the new production compat branch staged in Task 1. No functional change; pin-ref rewrite only. Tracking: T8943