Skip to content

[INFRA] Set up default rulesets for default and release branches - #395

Open
asf-gitbox-commits wants to merge 1 commit into
masterfrom
infrastructure-ruleset-bot/default-branch-protection
Open

[INFRA] Set up default rulesets for default and release branches#395
asf-gitbox-commits wants to merge 1 commit into
masterfrom
infrastructure-ruleset-bot/default-branch-protection

Conversation

@asf-gitbox-commits

Copy link
Copy Markdown

This Pull Request enables the repository to conform with the "sane default security settings" of the Apache Software Foundation by configuring a default branch ruleset that protects the default branch and any release branches.

Note that ~DEFAULT_BRANCH is a GitHub symbolic link to the current default branch (HEAD) of the repository and does not need changing.
If the managing project does not wish to set up these defaults, please close this Pull Request. Alternatively, the project may merge this Pull Request to apply the changes immediately.

If no action is taken, this Pull Request will be automatically merged by the Apache Infrastructure team on 2026-06-14 (30 days from now).

For any further information, please reach us on Slack or at: users@infra.apache.org

Comment thread .asf.yaml
branches:
includes:
- "~DEFAULT_BRANCH"
- "release/*"

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[P1] 现有发布分支没有被这些模式命中

仓库实时分支是 1.31.12,它们当前全部 protected=false;ASF normalizer 生成的条件只有 ~DEFAULT_BRANCHrefs/heads/release/*refs/heads/rel/*,因此合并后实际只覆盖 master,这些版本维护分支仍可被删除或强推。这与 PR 声明保护默认分支和发布分支不一致。请按仓库真实命名补充数值版本分支模式(或显式 include 列表),并在提交前用实时 branch list 对账覆盖范围。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants