T8943: sweep HIGH-producer pins to renamed branches (rollout 1c)

[andamasov]

Rollout 1c Task 2 — target-aware HIGH-producer pin sweep. Rewrites uses: pins to vyos/.github, vyos/vyos-cla-signatures, and VyOS-Networks/vyos-reusable-workflows from their old default branch to the production compat branch (staged in Task 1). No functional change; canary (vyos/vyos-1x#5240) Phase-0-clean. Kept draft to avoid redundant bot CodeRabbit cycles; admin-merged. Tracking: T8943

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: dc9a23ce-31b5-4aa2-9acf-0004c66de7d7

📥 Commits

Reviewing files that changed from the base of the PR and between c693b56 and 30e34fe.

📒 Files selected for processing (7)

• .github/workflows/chceck-pr-message.yml
• .github/workflows/check-pr-conflicts.yml
• .github/workflows/check-stale.yml
• .github/workflows/cla-check.yml
• .github/workflows/codeql.yml
• .github/workflows/pr-mirror-repo-sync.yml
• .github/workflows/trigger-rebuild-repo-package.yml

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow configurations to use production-stable versions instead of development versions, ensuring consistent and tested workflow execution across the repository.

Walkthrough

Seven GitHub Actions workflows now reference reusable workflows from the @production ref instead of @current. The updates apply to PR validation (message format, conflicts, staleness), code analysis (CodeQL), CLA verification, repository synchronization, and package rebuild trigger workflows.

Changes

Workflow Reference Migration to Production

Layer / File(s)	Summary
Update reusable workflow references to production .github/workflows/chceck-pr-message.yml, .github/workflows/check-pr-conflicts.yml, .github/workflows/check-stale.yml, .github/workflows/cla-check.yml, .github/workflows/codeql.yml, .github/workflows/pr-mirror-repo-sync.yml, .github/workflows/trigger-rebuild-repo-package.yml	All uses: references to external reusable workflows switch from @current to @production, redirecting PR validation, analysis, integration, and repository operation jobs to the production workflow definitions.

Possibly Related PRs

• vyos/vyatta-bash#32: Updates the PR message checking workflow to call the reusable check-pr-message.yml from @production instead of @current, overlapping with this PR's PR message validation reference update.

✨ Finishing Touches

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch chore/rollout-1c-high-pin-sweep

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

👍
No issues in PR Title / Commit Title