Skip to content

fix(rulesets): provision RepositoryRuleset per repo on Free tier#6

Merged
diazdesandi merged 1 commit into
mainfrom
cursor/per-repo-repository-rulesets
Jun 16, 2026
Merged

fix(rulesets): provision RepositoryRuleset per repo on Free tier#6
diazdesandi merged 1 commit into
mainfrom
cursor/per-repo-repository-rulesets

Conversation

@diazdesandi

@diazdesandi diazdesandi commented Jun 16, 2026

Copy link
Copy Markdown
Member

Summary

  • Replace branch-protection bootstrap with per-repo github:RepositoryRuleset when enableRulesets: false (GitHub Free default for thaw-app)
  • Keep org-level OrganizationRuleset when enableRulesets: true (Team+); repos.yaml branchProtection remains for explicit overrides only
  • Update architecture docs and tests to reflect repository rulesets as the Free-tier enforcement path

Test plan

  • bun test (75 passing)
  • bun run typecheck
  • Run ./scripts/drop_bootstrap_from_state.sh if bootstrap README resources are still in Pulumi state
  • pulumi preview on dev — expect RepositoryRuleset creates and legacy BranchProtection removals
  • pulumi up on dev — verify rulesets appear under each managed repo in GitHub Settings → Rules → Rulesets

Replace branch-protection bootstrap with per-repo github:RepositoryRuleset
when enableRulesets is false; keep org rulesets for Team+ and branchProtection
for explicit overrides only.
@sonarqubecloud

Copy link
Copy Markdown

@github-actions

Copy link
Copy Markdown

🍹 preview on thaw-config/diazdesandi/dev

Pulumi report

View in Pulumi Cloud

   Previewing update (dev)

View Live: https://app.pulumi.com/diazdesandi/thaw-config/dev/previews/f14d8651-a1f2-45bb-a191-6525c4f73bcf

Downloading plugin github-6.14.0: starting
Downloading plugin github-6.14.0: done
Installing plugin github-6.14.0: starting
Installing plugin github-6.14.0: done

@ Previewing update....
   pulumi:pulumi:Stack thaw-config-dev running 
@ Previewing update......
+  custom:github:OrgRepositoryRulesets website-rulesets create 
+  custom:github:OrgRepositoryRulesets homebrew-tap-rulesets create 
+  custom:github:OrgRepositoryRulesets menubarspawner-rulesets create 
+  custom:github:OrgRepositoryRulesets raycast-extension-rulesets create 
+  custom:github:OrgRepositoryRulesets dot-github-rulesets create 
+  custom:github:OrgRepositoryRulesets org-ci-rulesets create 
@ Previewing update....
+  github:index:RepositoryRuleset website-rs-repo-main-default create 
+  github:index:RepositoryRuleset website-rs-release-branch-protection create 
+  github:index:RepositoryRuleset homebrew-tap-rs-repo-main-default create 
@ Previewing update....
+  github:index:RepositoryRuleset homebrew-tap-rs-release-branch-protection create 
+  github:index:RepositoryRuleset dot-github-rs-repo-main-default create 
+  github:index:RepositoryRuleset dot-github-rs-release-branch-protection create 
+  github:index:RepositoryRuleset org-ci-rs-repo-main-default create 
+  github:index:RepositoryRuleset org-ci-rs-release-branch-protection create 
+  github:index:RepositoryRuleset menubarspawner-rs-repo-main-default create 
+  github:index:RepositoryRuleset menubarspawner-rs-release-branch-protection create 
@ Previewing update....
+  github:index:RepositoryRuleset raycast-extension-rs-repo-main-default create 
+  github:index:RepositoryRuleset raycast-extension-rs-release-branch-protection create 
@ Previewing update....
-  github:index:BranchProtection raycast-extension-bp-main delete 
-  github:index:BranchProtection website-bp-main delete 
-  github:index:BranchProtection org-ci-bp-main delete 
-  github:index:BranchProtection website-bp-release-- delete 
-  github:index:BranchProtection dot-github-bp-release-- delete 
-  github:index:BranchProtection menubarspawner-bp-release-- delete 
-  github:index:BranchProtection homebrew-tap-bp-release-- delete 
-  github:index:BranchProtection org-ci-bp-release-- delete 
-  github:index:BranchProtection homebrew-tap-bp-main delete 
-  github:index:BranchProtection raycast-extension-bp-release-- delete 
-  github:index:BranchProtection dot-github-bp-main delete 
-  github:index:BranchProtection menubarspawner-bp-main delete 
-  custom:github:OrgRepositoryBranchProtection raycast-extension-branch-protection delete 
-  custom:github:OrgRepositoryBranchProtection website-branch-protection delete 
-  custom:github:OrgRepositoryBranchProtection org-ci-branch-protection delete 
-  custom:github:OrgRepositoryBranchProtection dot-github-branch-protection delete 
-  custom:github:OrgRepositoryBranchProtection homebrew-tap-branch-protection delete 
-  custom:github:OrgRepositoryBranchProtection menubarspawner-branch-protection delete 
   pulumi:pulumi:Stack thaw-config-dev  
Resources:
   + 18 to create
   - 18 to delete
   36 changes. 259 unchanged

   

@pulumi

pulumi Bot commented Jun 16, 2026

Copy link
Copy Markdown

🍹 The Update (preview) for diazdesandi/thaw-config/dev (at 9f133fd) was successful.

✨ Neo Code Review

This change swaps per-repo `BranchProtection` resources for native `RepositoryRuleset` resources on all 6 managed repos (same policy, better API primitive). 🟡 Moderate Risk — there is a brief window during the apply where branch protection is unenforced on all repos; schedule the merge/apply accordingly.

This PR migrates the Free-tier branch policy enforcement mechanism from BranchProtection resources to RepositoryRuleset resources across all 6 managed repos. Previously, when enableRulesets: false, the policy from rulesets.yaml was translated and bootstrapped as legacy github:BranchProtection objects. The new code introduces createRepositoryRulesets which provisions native github:RepositoryRuleset resources per-repo instead — the same GitHub API primitive used for org rulesets, just scoped to individual repositories.

🟡 WarningTransient protection gap during apply: The 12 existing BranchProtection resources are deleted and 12 new RepositoryRuleset resources are created as a non-atomic swap. Pulumi deletes and creates these as separate operations, meaning there will be a brief window where main and release/* branches on all 6 repos have no enforced protection rules. The new rulesets use deleteBeforeReplace: true, which is correct for replacement scenarios, but the create/delete ordering across different resource types here is not guaranteed to be creates-first. Verify the apply order or accept the brief gap if repos are low-traffic at apply time.

🔵 Info — The policy content carried forward to the new RepositoryRuleset resources is equivalent to what was on the deleted BranchProtection resources (2 required reviews, codeowner reviews, linear history, ci status check, no force-push/deletion). The RepositoryRuleset type also gains support for mergeQueue and requiredDeployments rules that the old bootstrap path could not provision.

🔵 InfomergeRepoBranchProtection no longer merges ruleset-derived defaults into per-repo branchProtection entries — it now passes them through as-is. Any repo in repos.yaml that previously relied on the implicit merge of ruleset defaults into its branchProtection overrides will now only see its explicit overrides.

Resource Changes

    Name                                            Type                                              Operation
+   homebrew-tap-rs-release-branch-protection       github:index/repositoryRuleset:RepositoryRuleset  create
+   homebrew-tap-rulesets                           custom:github:OrgRepositoryRulesets               create
-   dot-github-bp-main                              github:index/branchProtection:BranchProtection    delete
+   org-ci-rs-release-branch-protection             github:index/repositoryRuleset:RepositoryRuleset  create
+   menubarspawner-rulesets                         custom:github:OrgRepositoryRulesets               create
+   dot-github-rs-repo-main-default                 github:index/repositoryRuleset:RepositoryRuleset  create
-   org-ci-bp-release--                             github:index/branchProtection:BranchProtection    delete
+   raycast-extension-rs-repo-main-default          github:index/repositoryRuleset:RepositoryRuleset  create
-   menubarspawner-branch-protection                custom:github:OrgRepositoryBranchProtection       delete
-   org-ci-bp-main                                  github:index/branchProtection:BranchProtection    delete
+   raycast-extension-rulesets                      custom:github:OrgRepositoryRulesets               create
+   website-rs-release-branch-protection            github:index/repositoryRuleset:RepositoryRuleset  create
-   dot-github-branch-protection                    custom:github:OrgRepositoryBranchProtection       delete
+   menubarspawner-rs-repo-main-default             github:index/repositoryRuleset:RepositoryRuleset  create
+   dot-github-rs-release-branch-protection         github:index/repositoryRuleset:RepositoryRuleset  create
+   org-ci-rs-repo-main-default                     github:index/repositoryRuleset:RepositoryRuleset  create
-   dot-github-bp-release--                         github:index/branchProtection:BranchProtection    delete
-   raycast-extension-branch-protection             custom:github:OrgRepositoryBranchProtection       delete
-   website-bp-main                                 github:index/branchProtection:BranchProtection    delete
+   website-rs-repo-main-default                    github:index/repositoryRuleset:RepositoryRuleset  create
+   org-ci-rulesets                                 custom:github:OrgRepositoryRulesets               create
+   homebrew-tap-rs-repo-main-default               github:index/repositoryRuleset:RepositoryRuleset  create
+   website-rulesets                                custom:github:OrgRepositoryRulesets               create
+   dot-github-rulesets                             custom:github:OrgRepositoryRulesets               create
-   website-branch-protection                       custom:github:OrgRepositoryBranchProtection       delete
-   homebrew-tap-bp-release--                       github:index/branchProtection:BranchProtection    delete
-   website-bp-release--                            github:index/branchProtection:BranchProtection    delete
-   raycast-extension-bp-main                       github:index/branchProtection:BranchProtection    delete
-   org-ci-branch-protection                        custom:github:OrgRepositoryBranchProtection       delete
+   menubarspawner-rs-release-branch-protection     github:index/repositoryRuleset:RepositoryRuleset  create
-   menubarspawner-bp-main                          github:index/branchProtection:BranchProtection    delete
-   menubarspawner-bp-release--                     github:index/branchProtection:BranchProtection    delete
-   homebrew-tap-bp-main                            github:index/branchProtection:BranchProtection    delete
-   raycast-extension-bp-release--                  github:index/branchProtection:BranchProtection    delete
+   raycast-extension-rs-release-branch-protection  github:index/repositoryRuleset:RepositoryRuleset  create
-   homebrew-tap-branch-protection                  custom:github:OrgRepositoryBranchProtection       delete

Detailed Diff

View diff
pulumi:pulumi:Stack: (same)
    [urn=urn:pulumi:dev::thaw-config::pulumi:pulumi:Stack::thaw-config-dev]
    + custom:github:OrgRepositoryRulesets: (create)
        [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets::website-rulesets]
    + custom:github:OrgRepositoryRulesets: (create)
        [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets::homebrew-tap-rulesets]
    + custom:github:OrgRepositoryRulesets: (create)
        [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets::menubarspawner-rulesets]
    + custom:github:OrgRepositoryRulesets: (create)
        [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets::raycast-extension-rulesets]
    + custom:github:OrgRepositoryRulesets: (create)
        [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets::dot-github-rulesets]
    + custom:github:OrgRepositoryRulesets: (create)
        [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets::org-ci-rulesets]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::website-rs-repo-main-default]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::website-rs-release-branch-protection]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::homebrew-tap-rs-repo-main-default]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::homebrew-tap-rs-release-branch-protection]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::dot-github-rs-repo-main-default]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::dot-github-rs-release-branch-protection]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::org-ci-rs-repo-main-default]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::org-ci-rs-release-branch-protection]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::menubarspawner-rs-repo-main-default]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::menubarspawner-rs-release-branch-protection]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::raycast-extension-rs-repo-main-default]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
        + github:index/repositoryRuleset:RepositoryRuleset: (create)
            [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryRulesets$github:index/repositoryRuleset:RepositoryRuleset::raycast-extension-rs-release-branch-protection]
            [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
            --outputs:--
          + bypassActors: []
          + etag        : [unknown]
          + id          : [unknown]
          + nodeId      : [unknown]
          + rules       : {
              + branchNamePattern        : <null>
              + commitAuthorEmailPattern : <null>
              + commitMessagePattern     : <null>
              + committerEmailPattern    : <null>
              + copilotCodeReview        : {
                  + reviewDraftPullRequests: false
                  + reviewOnPush           : false
                }
              + creation                 : true
              + deletion                 : true
              + fileExtensionRestriction : <null>
              + filePathRestriction      : <null>
              + maxFilePathLength        : <null>
              + maxFileSize              : <null>
              + mergeQueue               : <null>
              + nonFastForward           : true
              + pullRequest              : {
                  + allowedMergeMethods           : [
                  +     [0]: "squash"
                    ]
                  + dismissStaleReviewsOnPush     : true
                  + requireCodeOwnerReview        : true
                  + requireLastPushApproval       : true
                  + requiredApprovingReviewCount  : 2
                  + requiredReviewThreadResolution: true
                  + requiredReviewers             : []
                }
              + requiredCodeScanning     : <null>
              + requiredDeployments      : <null>
              + requiredLinearHistory    : true
              + requiredSignatures       : false
              + requiredStatusChecks     : {
                  + doNotEnforceOnCreate            : false
                  + requiredChecks                  : [
                  +     [0]: {
                          + context      : "ci"
                          + integrationId: 0
                        }
                    ]
                  + strictRequiredStatusChecksPolicy: true
                }
              + tagNamePattern           : <null>
              + update                   : false
              + updateAllowsFetchAndMerge: false
            }
          + rulesetId   : [unknown]
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::raycast-extension-bp-main]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "main"
    repositoryId                 : "R_kgDORf632A"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDORf632M4Essjm"
  - lockBranch                   : false
  - pattern                      : "main"
  - repositoryId                 : "R_kgDORf632A"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::website-bp-main]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "main"
    repositoryId                 : "R_kgDOS6-dSw"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dS84Esshg"
  - lockBranch                   : false
  - pattern                      : "main"
  - repositoryId                 : "R_kgDOS6-dSw"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::org-ci-bp-main]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "main"
    repositoryId                 : "R_kgDOS6-dZQ"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dZc4Esshn"
  - lockBranch                   : false
  - pattern                      : "main"
  - repositoryId                 : "R_kgDOS6-dZQ"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::website-bp-release--]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "release/*"
    repositoryId                 : "R_kgDOS6-dSw"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dS84Esshi"
  - lockBranch                   : false
  - pattern                      : "release/*"
  - repositoryId                 : "R_kgDOS6-dSw"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::dot-github-bp-release--]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "release/*"
    repositoryId                 : "R_kgDOS6-dlw"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dl84Essiy"
  - lockBranch                   : false
  - pattern                      : "release/*"
  - repositoryId                 : "R_kgDOS6-dlw"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::menubarspawner-bp-release--]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "release/*"
    repositoryId                 : "R_kgDOStk7Jg"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOStk7Js4EssjQ"
  - lockBranch                   : false
  - pattern                      : "release/*"
  - repositoryId                 : "R_kgDOStk7Jg"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::homebrew-tap-bp-release--]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "release/*"
    repositoryId                 : "R_kgDOS6-dfg"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dfs4Esshm"
  - lockBranch                   : false
  - pattern                      : "release/*"
  - repositoryId                 : "R_kgDOS6-dfg"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::org-ci-bp-release--]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "release/*"
    repositoryId                 : "R_kgDOS6-dZQ"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dZc4Esshr"
  - lockBranch                   : false
  - pattern                      : "release/*"
  - repositoryId                 : "R_kgDOS6-dZQ"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::homebrew-tap-bp-main]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "main"
    repositoryId                 : "R_kgDOS6-dfg"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dfs4Esshl"
  - lockBranch                   : false
  - pattern                      : "main"
  - repositoryId                 : "R_kgDOS6-dfg"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::raycast-extension-bp-release--]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "release/*"
    repositoryId                 : "R_kgDORf632A"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDORf632M4Essjo"
  - lockBranch                   : false
  - pattern                      : "release/*"
  - repositoryId                 : "R_kgDORf632A"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::dot-github-bp-main]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "main"
    repositoryId                 : "R_kgDOS6-dlw"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOS6-dl84Essiu"
  - lockBranch                   : false
  - pattern                      : "main"
  - repositoryId                 : "R_kgDOS6-dlw"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <null>
          - pullRequestBypassers        : <null>
          - requireCodeOwnerReviews     : true
          - requireLastPushApproval     : true
          - requiredApprovingReviewCount: 2
          - restrictDismissals          : false
        }
    ]
  - requiredStatusChecks         : [
  -     [0]: {
          - contexts: [
          -     [0]: "ci"
            ]
          - strict  : true
        }
    ]
  - restrictPushes               : []
- github:index/branchProtection:BranchProtection: (delete)
    [urn=urn:pulumi:dev::thaw-config::custom:github:OrgRepository$custom:github:OrgRepositoryBranchProtection$github:index/branchProtection:BranchProtection::menubarspawner-bp-main]
    [provider=urn:pulumi:dev::thaw-config::pulumi:providers:github::default_6_14_0::225ee7f4-aef2-42ea-8c38-890178d35051]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    pattern                      : "main"
    repositoryId                 : "R_kgDOStk7Jg"
    requireConversationResolution: true
    requireSignedCommits         : false
    requiredLinearHistory        : true
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            requireCodeOwnerReviews     : true
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 2
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : [
                [0]: "ci"
            ]
            strict    : true
        }
    ]
    --outputs:--
  - allowsDeletions              : false
  - allowsForcePushes            : false
  - enforceAdmins                : true
  - id                           : "BPR_kwDOStk7Js4EssjS"
  - lockBranch                   : false
  - pattern                      : "main"
  - repositoryId                 : "R_kgDOStk7Jg"
  - requireConversationResolution: true
  - requireSignedCommits         : false
  - requiredLinearHistory        : true
  - requiredPullRequestReviews   : [
  -     [0]: {
          - dismissStaleReviews         : true
          - dismissalRestrictions       : <nul
... diff truncated to fit comment size limit

@diazdesandi diazdesandi marked this pull request as ready for review June 16, 2026 09:03
@diazdesandi diazdesandi self-assigned this Jun 16, 2026
@diazdesandi diazdesandi merged commit 7aa5c27 into main Jun 16, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant