This is an automated email from the ASF dual-hosted git repository. github-merge-queue[bot] pushed a commit to branch gh-readonly-queue/main/pr-3459-e4bec84bcca5ba4f3e19583e95b1de7c1fab2559 in repository https://gitbox.apache.org/repos/asf/iceberg-rust.git
commit 3bb8167a2c83fe11229b1cf67de0e641c49c8ef6 Author: Kevin Liu <[email protected]> AuthorDate: Thu Oct 15 18:47:28 2026 +0000 ci: move required status checks into the Merge Queue ruleset (#3459) Classic branch protection can only be bypassed by admins. Defining the required checks in the Merge Queue ruleset lets that ruleset's bypass actors skip them. The checks, their contexts and the non-strict policy are unchanged, and approvals and linear history stay in classic protection. Co-authored-by: Copilot App <[email protected]> --- .asf.yaml | 40 +++++++++++++++++++++------------------- 1 file changed, 21 insertions(+), 19 deletions(-) diff --git a/.asf.yaml b/.asf.yaml index abcb4bb62..8363d9eaa 100644 --- a/.asf.yaml +++ b/.asf.yaml @@ -35,25 +35,6 @@ github: rebase: false protected_branches: main: - required_status_checks: - # Check context names (job names, not workflow files) that Merge Queue - # waits for. Every producer workflow must run on both `pull_request` - # and `merge_group`, without path filters, so each context always - # reports. `strict` is omitted: Merge Queue validates every entry - # against an up-to-date main, and ASF defaults it to false. - contexts: - # Repository policy and security checks. - - Analyze Actions - - Run zizmor 🌈 - - asf-allowlist-check - - # Rust workflow gates. - - ci-required - - check-public-api - - # Python bindings workflow gates. - - bindings-python-ci-required - required_pull_request_reviews: required_approving_review_count: 1 dismiss_stale_reviews: false @@ -69,6 +50,27 @@ github: - "~DEFAULT_BRANCH" exclude: [] rules: + - type: required_status_checks + parameters: + # PR branches need not be up to date with main: Merge Queue + # already tests each entry against the latest main. + strict_required_status_checks_policy: false + # Check context names (job names, not workflow files) that Merge + # Queue waits for. Every producer workflow must run on both + # `pull_request` and `merge_group`, without path filters, so each + # context always reports. + required_status_checks: + # Repository policy and security checks. + - context: Analyze Actions + - context: Run zizmor 🌈 + - context: asf-allowlist-check + + # Rust workflow gates. + - context: ci-required + - context: check-public-api + + # Python bindings workflow gates. + - context: bindings-python-ci-required - type: merge_queue parameters: check_response_timeout_minutes: 360
