From ac5604ec92fb64ddf71e3f19aaa3a7e54d34ee6b Mon Sep 17 00:00:00 2001 From: unkin-agent Date: Sat, 19 Sep 2026 22:28:09 +1000 Subject: [PATCH] Protect main on the jellyfin-plugin-sso fork Require the PR pipeline and Owners merge approval on main, keeping owner push for upstream syncs. --- .../unkin/repository/jellyfin-plugin-sso.yaml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/config/git.unkin.net/unkin/repository/jellyfin-plugin-sso.yaml b/config/git.unkin.net/unkin/repository/jellyfin-plugin-sso.yaml index b1c5254..30c42b2 100644 --- a/config/git.unkin.net/unkin/repository/jellyfin-plugin-sso.yaml +++ b/config/git.unkin.net/unkin/repository/jellyfin-plugin-sso.yaml @@ -1 +1,15 @@ fork_from: "mirrors/jellyfin-plugin-sso" +branch_protection: + - rule_name: "main" + merge_whitelist_teams: + - "Owners" + # Whitelist-push: the owner pushes main directly when syncing upstream; + # everyone else must open a PR. + enable_push: true + push_whitelist_users: + - "unkinben" + # PRs to main must pass the plugin build pipeline before merge. + status_check_contexts: + - "ci/woodpecker/pr/ci" + approval_whitelist_teams: + - "Owners" -- 2.47.3