T0000: TEST Update m-pr-3.txt

.github/backup/add-pr-labels.yml

@@ -0,0 +1,16 @@
+---
+name: Add pull request labels
+
+on:
+  pull_request_target:
+    branches:
+      - current
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  add-pr-label:
+    uses: vyos/.github/.github/workflows/add-pr-labels.yml@current
+    secrets: inherit

.github/backup/add-rebase-label.yml

@@ -0,0 +1,14 @@
+name: Add rebase label
+
+on:
+  pull_request_target:
+    types: [synchronize, opened, reopened, labeled, unlabeled]
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  add-rebase-label:
+    uses: vyos/.github/.github/workflows/add-rebase-label.yml@current
+    secrets: inherit

.github/backup/assign-reviewers_wf.txt

@@ -0,0 +1,19 @@
+name: "Assign Reviewers"
+on:
+  pull_request:
+    types: [opened, reopened, ready_for_review, locked]
+    branches:
+      - current
+
+permissions:
+  pull-requests: write
+
+jobs:
+  assign-reviewers:
+    runs-on: ubuntu-latest
+    steps:
+      - name: "Assign Reviwers Team"
+        uses: rowi1de/auto-assign-review-teams@v1.1.3
+        with:
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          teams: "${{ github.repository_owner }}/reviewers"

.github/backup/auto-author-assign.yml

@@ -0,0 +1,14 @@
+name: "PR Triage"
+on:
+  pull_request_target:
+    types: [opened, reopened, ready_for_review, locked]
+
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  assign-author:
+    uses: vyos/.github/.github/workflows/assign-author.yml@current
+    secrets: inherit

.github/backup/check-pr-conflicts.yml

@@ -0,0 +1,14 @@
+
+name: "PR Conflicts checker"
+on:
+  pull_request_target:
+    types: [synchronize]
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  check-pr-conflict-call:
+    uses: vyos/.github/.github/workflows/check-pr-merge-conflict.yml@current
+    secrets: inherit

.github/backup/check-pr-message.yml

@@ -0,0 +1,17 @@
+---
+name: Check pull request message format
+
+on:
+  pull_request_target:
+    branches:
+      - current
+    types: [opened, synchronize, edited]
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  check-pr-title:
+    uses: vyos/.github/.github/workflows/check-pr-message.yml@T6846-pr-title-workflow-creds
+    secrets: inherit

.github/backup/check-stale.yml

@@ -0,0 +1,13 @@
+name: "Issue and PR stale management"
+on:
+  schedule:
+  - cron: "0 0 * * *"
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  stale:
+    uses: vyos/.github/.github/workflows/check-stale.yml@current
+    secrets: inherit

.github/backup/check-unused-imports.yml

@@ -0,0 +1,14 @@
+name: Check for unused imports using Pylint
+on:
+  pull_request_target:
+    branches:
+      - current
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  check-unused-imports:
+    uses: vyos/.github/.github/workflows/check-unused-imports.yml@T6862-make-unused-import-check-parameterized
+    secrets: inherit

.github/backup/cleanup-mirror-pr-branch.yml

@@ -0,0 +1,35 @@
+name: Cleanup pr mirror branch
+
+on:
+  pull_request:
+    types: [closed]
+    branches:
+        - current
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch to delete'
+        required: true
+
+permissions:
+  contents: write
+
+jobs:
+  delete_branch:
+    if: ${{ (github.event_name == 'workflow_dispatch' || startsWith(github.event.pull_request.head.ref, 'mirror/current/')) && github.repository_owner != 'vyos' }}
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Delete branch
+        run: |
+          branch=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.branch || github.event.pull_request.head.ref }}
+          if [[ $branch != mirror/current/* ]]; then
+            echo "Branch name to clean must start with 'mirror/current/'"
+            exit 1
+          fi
+          repo=${{ github.repository }}
+          git remote set-url origin https://x-access-token:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}
+          git push origin --delete $branch

.github/backup/codeowners.txt

@@ -0,0 +1 @@
+* @vyos/reviewers

.github/backup/codeql.yml

@@ -0,0 +1,30 @@
+name: "Perform CodeQL Analysis"
+
+on:
+  push:
+    branches: [ "current" ]
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [ "current" ]
+    paths:
+      - '**'
+      - '!.github/**'
+      - '!**/*.md'
+  schedule:
+    - cron: '22 10 * * 0'
+
+permissions:
+  actions: read
+  contents: read
+  security-events: write
+
+jobs:
+  codeql-analysis-call:
+    uses: vyos/.github/.github/workflows/codeql-analysis.yml@current
+    secrets: inherit
+    with:
+      languages: "['python']"

.github/backup/label-backport.yml

@@ -0,0 +1,12 @@
+name: Mergifyio backport
+
+on: [issue_comment]
+
+permissions:
+  pull-requests: write
+  contents: read
+
+jobs:
+  mergifyio-backport:
+    uses: vyos/.github/.github/workflows/label-backport.yml@current
+    secrets: inherit

.github/backup/mirror-pr-and-sync-current-old.txt

@@ -0,0 +1,25 @@
+name: Create Mirror PR and Repo Sync (Current) Backup
+on:
+  pull_request_target:
+      types:
+        - closed
+      branches:
+        - current
+
+permissions:
+  pull-requests: write
+  contents: write
+concurrency:
+  group: mirror-pr-and-sync-current
+  cancel-in-progress: false
+jobs:
+  mirror-pr-current:
+    name: Mirror PR (Current)
+    uses: ./.github/workflows/mirror-pr-current.yml
+    secrets: inherit
+
+  repo-sync-current:
+    name: Repo Sync (Current)
+    uses: ./.github/workflows/repo-sync-current.yml
+    needs: [mirror-pr-current]
+    secrets: inherit

.github/backup/mirror-pr-and-sync-current.txt

@@ -0,0 +1,113 @@
+name: Create Mirror PR and Repo Sync (Current)
+on:
+  pull_request_target:
+      types:
+        - closed
+      branches:
+        - current
+  workflow_call:
+  workflow_dispatch:
+    inputs:
+      pr_title:
+        description: 'Title of the PR'
+        required: false
+      pr_number:
+        description: 'Number of the PR'
+        required: false
+
+env:
+  GH_TOKEN: ${{ secrets.PAT }}
+
+concurrency:
+  group: mirror-pr-repo-sync
+  cancel-in-progress: false
+jobs:
+  mirror-pr-repo-sync:
+    runs-on: ubuntu-latest
+    permissions:
+      pull-requests: write
+      contents: write
+
+    steps:
+    - name: Bullfrog Secure Runner
+      uses: bullfrogsec/bullfrog@v0
+      with:
+        egress-policy: audit
+
+    - name: Checkout
+      uses: actions/checkout@v4
+
+    - name: Set vars
+      run: |
+        source_repo="${{ github.repository }}"
+        echo "source_repo=${source_repo}" >> $GITHUB_ENV
+        target_repo=$(echo $source_repo | sed 's/^[^\/]*\//vyos-networks\//')
+        echo "target_repo=${target_repo}" >> $GITHUB_ENV
+        pr_source_branch=$(git branch --show-current)
+        echo "pr_source_branch=${pr_source_branch}" >> $GITHUB_ENV
+        echo "pr_target_branch=${pr_source_branch}" >> $GITHUB_ENV
+        pr_number=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.pr_number || github.event.pull_request.number }}
+        echo "pr_number=${pr_number}" >> $GITHUB_ENV
+        pr_title="${{ github.event_name == 'workflow_dispatch' && github.event.inputs.pr_title || github.event.pull_request.title }}"
+        echo "pr_title=${pr_title}" >> $GITHUB_ENV
+        echo "pr_merge_branch=mirror/current/$pr_number" >> $GITHUB_ENV
+
+    - name: Get PR commit
+      run: |
+        mkdir -p /tmp/public
+        cd /tmp/public
+        git config --global user.email "action@github.com"
+        git config --global user.name "GitHub Action"
+        git init
+        git remote add origin https://github.com/${source_repo}.git
+        git fetch
+        git checkout -b $pr_source_branch
+        pr_info=$(gh pr view $pr_number --json commits,mergeCommit)
+        last_commit=$(echo $pr_info | jq -r '.commits[-1].oid')
+        merge_commit=$(echo $pr_info | jq -r '.mergeCommit.oid')
+        merge_commit_message=$(git log -1 --pretty=%B $merge_commit)
+        echo "merge_commit=${merge_commit}" >> $GITHUB_ENV
+        if [[ "$merge_commit_message" == "Merge pull request #${pr_number} from"* ]]; then
+          echo "last_commit=${last_commit}" >> $GITHUB_ENV
+        else
+          echo "last_commit=${merge_commit}" >> $GITHUB_ENV
+        fi
+
+    - name: Get PR body
+      run: |
+        cd /tmp/public
+        pr_body=$(gh pr view $pr_number --json body -q .body)
+        echo "pr_body<<EOF" >> $GITHUB_ENV
+        echo "$pr_body" >> $GITHUB_ENV
+        echo "EOF" >> $GITHUB_ENV
+
+    - name: Create temp remote branch
+      run: |
+        cd /tmp/public
+        git checkout -b $pr_merge_branch $last_commit
+
+    - name: Push merge branch to target repo
+      run: |
+        cd /tmp/public
+        git remote add target https://x-access-token:${{ secrets.PAT }}@github.com/${target_repo}.git
+        git push target $pr_merge_branch
+
+    - name: Create remote PR
+      run: |
+        run_url="${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+        title="${pr_title} (mirror ${pr_number})"
+        echo "**Note**: This pull request is mirrored from PR [$pr_number](https://github.com/${source_repo}/pull/${pr_number}) using [workflow run](${run_url})." > pr_body.txt
+        echo "" >> pr_body.txt
+        echo "${pr_body}" >> pr_body.txt
+        gh pr create --repo ${target_repo} --head $pr_merge_branch --base $pr_target_branch --title "${title}" --body "$(cat pr_body.txt)"
+
+    - name: Trigger repo sync
+      shell: bash
+      run: |
+        echo "Triggering sync workflow for ${{ secrets.REMOTE_OWNER }}/${{ secrets.REMOTE_REPO }}"
+        echo "Triggering sync workflow with PAT ${{ secrets.PAT }}"
+        curl -X POST \
+          -H "Accept: application/vnd.github.everest-preview+json" \
+          -H "Authorization: Bearer ${{ secrets.PAT }}" \
+          https://api.github.com/repos/${{ secrets.REMOTE_OWNER }}/${{ secrets.REMOTE_REPO }}/actions/workflows/repo-sync-current.yml/dispatches \
+          -d '{"ref":"git-actions", "inputs": {"source_repo": "${{ env.source_repo }}", "source_commit_sha": "${{ env.merge_commit }}", "destination_branch": "${{ env.pr_target_branch }}"}}'