Yicong-Huang opened a new pull request, #7094: URL: https://github.com/apache/texera/pull/7094
### What changes were proposed in this PR? Harden the `.asf.yaml` branch-protection rulesets: - **Merge queue on release branches.** Add `refs/heads/release/*` to the `Merge Queue` ruleset, so `release/*` gets the same merge-queue, PR-review, status-check, and linear-history rules as `main`. - **Drop `rel/*`.** Remove `refs/heads/rel/*` from `Default Branch Protection` (deprecated, and not in the allowlist below). - **Restore `release/v1.1.0-incubating`.** Remove its temporary exclude now that the #7085 maintenance is done. - **Restrict branch creation.** A new `Restrict Branch Creation` ruleset blocks creating any branch except `main`, `release/*`, `backport/*`, `gh-pages`, and `gh-readonly-queue/*` (merge-queue temp branches). Direct pushes to `apache/texera` only; forks and Infra bypass unaffected. `creation` is unsupported in asfyaml convenience syntax (which also bars `bypass_teams` in a raw payload), so that ruleset uses the raw form with `actor_id: 118420`. `Default Branch Protection` is kept for its explicit Infra bypass despite overlapping `Merge Queue`. ### Any related issues, documentation, discussions? Closes #7093. ### How was this PR tested? Ran the asfyaml normalizer (`asfyaml/feature/github/rulesets.py`, the code Infra applies) over the whole `.asf.yaml`: all three rulesets normalize to valid GitHub Rulesets payloads, and `bypass_teams: [root]` resolves to the same team id (118420) as the raw form. `.asf.yaml` has no unit tests; Infra applies it from the default branch. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Claude Code (Claude Opus 4.8) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
