vyos-configd should return the response R_ERROR_COMMIT on an error in any call to config dependency. However, to allow other dependencies to proceed, dependent script errors should be collected and returned after all calls are complete; cascading errors will be corrected on correcting the original config error once it is successfully reported.
Without a response to the originating config session, the commit lock can remain on error.
This was noticed with a default config containing the lines below; unpleasantly, this is triggered in this case by (T3275) operating on the added config stanza. Nonetheless, it reveals a needed case for managing config dependency failures.
service { ... conntrack-sync { accept-protocol "tcp" failover-mechanism { vrrp { sync-group "SGR" } } interface eth0 { peer "192.0.2.1" } } ... }