Skip to content

Restrict baselibs bypass to PRs and add fbaeuerle - #235

Merged
eclipse-otterdog[bot] merged 1 commit into
eclipse-score:mainfrom
4og:copilot/edit-otterdog-jsonnet
Oct 6, 2026
Merged

eclipse-otterdog[bot] merged 1 commit into
eclipse-score:mainfrom
4og:copilot/edit-otterdog-jsonnet

Conversation

@4og

@4og 4og commented Oct 6, 2026

Copy link
Copy Markdown
Member

Limit codeowner-baselibs bypass to PR merges, without authorizing direct or force pushes that bypass the PR requirement. Add fbaeuerle to the team.

  • Ruleset: Change the baselibs actor to @eclipse-score/codeowner-baselibs:pull_request. This permits bypassing required checks, merge queue, and reviews when merging a PR. Required checks, queue configuration, and allows_force_pushes: false remain unchanged.
  • Membership: Append fbaeuerle, preserving existing members and order.

Signed-off-by: GitHub <noreply@github.com>

Co-authored-by: 4og <2698858+4og@users.noreply.github.com>
@4og
4og requested a review from a team as a code owner October 6, 2026 15:30
@eclipse-otterdog

Copy link
Copy Markdown
Contributor

Thank you for raising a pull request to update the configuration of your GitHub organization.
You can manually add reviewers to this PR to eventually enable auto-merging.

The following conditions need to be fulfilled for auto-merging to be available:

  • valid configuration
  • approved by a member of team 'automotive-score-project-leads'
  • does not require any secrets
  • does not update settings only accessible via the GitHub Web UI
  • does not remove any resource
Otterdog commands and options

You can trigger otterdog actions by commenting on this PR:

  • /otterdog team-info checks the team / org membership for the PR author
  • /otterdog validate validates the configuration change
  • /otterdog validate info validates the configuration change, printing also validation infos
  • /otterdog check-sync checks if the base ref is in sync with live settings
  • /otterdog merge merges and applies the changes if the PR is eligible for auto-merging (only accessible for the author)
  • /otterdog done notifies the self-service bot that a required manual apply operation has been performed (only accessible for members of the admin team(s) eclipse-score/eclipsefdn-security, eclipse-score/eclipsefdn-releng)
  • /otterdog apply re-apply a previously failed attempt (only accessible for members of the admin team(s) eclipse-score/eclipsefdn-security, eclipse-score/eclipsefdn-releng)

@eclipse-otterdog

Copy link
Copy Markdown
Contributor

The author (4og) of this PR is associated with this organization in the role of MEMBER.

Additionally, 4og is a member of the following teams:

@eclipse-otterdog

Copy link
Copy Markdown
Contributor

Please find below the validation of the requested configuration changes:

Diff for 09c71d7
Project automotive.score[github_id=eclipse-score]
  there have been 43 validation infos, enable verbose output to display them.

  
!   team[name="codeowner-baselibs"] {
!     members = [
+      "fbaeuerle"
!     ]
!   }

  
!   repo_ruleset[name="main", repository=baselibs] {
!     bypass_actors = [
!       "@eclipse-score/codeowner-baselibs"            -> "@eclipse-score/codeowner-baselibs:pull_request"
!     ]
!   }
  
  Plan: 0 to add, 2 to change, 0 to delete.

@eclipse-otterdog

Copy link
Copy Markdown
Contributor

This Pull Request is eligible for auto-merging as it passed the following checks:

  • valid configuration
  • approved by a member of team 'automotive-score-project-leads'
  • does not require any secrets
  • does not update settings only accessible via the GitHub Web UI
  • does not remove any resource

Tip

In order to automatically merge and apply the changes, add a comment /otterdog merge. 🚀

@antonkri

antonkri commented Oct 6, 2026

Copy link
Copy Markdown
Contributor

/otterdog merge

@eclipse-otterdog
eclipse-otterdog Bot merged commit 1cce238 into eclipse-score:main Oct 6, 2026
2 of 3 checks passed
@eclipse-otterdog

Copy link
Copy Markdown
Contributor

Note

The following changes have been applied successfully:

Project automotive.score[github_id=eclipse-score]
  there have been 43 validation infos, enable verbose output to display them.

  
!   team[name="codeowner-baselibs"] {
!     members = [
+      "fbaeuerle"
!     ]
!   }

  
!   repo_ruleset[name="main", repository=baselibs] {
!     bypass_actors = [
!       "@eclipse-score/codeowner-baselibs"            -> "@eclipse-score/codeowner-baselibs:pull_request"
!     ]
!   }

  
  Applying changes:
   ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 100% 0:00:00
  
  Done.
  
  Executed plan: 0 added, 2 changed, 0 deleted.

@eclipse-otterdog

Copy link
Copy Markdown
Contributor

Warning

The current configuration is out-of-sync with the live settings:

Diff to live settings
Project automotive.score[github_id=eclipse-score]
  there have been 43 validation infos, enable verbose output to display them.

-  remove environment[name="copilot", repository=.eclipsefdn] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=persistency] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name=".github"] {
!     code_scanning_default_languages = [
-      "javascript"
+      "javascript-typescript"
-      "typescript"
!     ]
!   }

-  remove environment[name="copilot", repository=.github] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=process_description] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=itf] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=baselibs] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=communication] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove repo_ruleset[name="Code Quality Copilot review for default branch", repository=communication] {
-    allows_creations           = true
-    allows_deletions           = true
-    allows_force_pushes        = true
-    allows_updates             = true
-    bypass_actors              = []
-    enforcement                = "disabled"
-    exclude_refs               = []
-    include_refs               = [
-      "~DEFAULT_BRANCH"
-    ],
-    name                       = "Code Quality Copilot review for default branch"
-    required_merge_queue       = null
-    required_pull_request      = null
-    required_status_checks     = null
-    requires_commit_signatures = false
-    requires_deployments       = false
-    requires_linear_history    = false
-    target                     = "branch"
-  }

  
!   repo_ruleset[name="main", repository=communication] {
!     required_status_checks     = {
!       status_checks              = [
+        "any:review-checklists"
-        "review-checklists"
!       ]
!     }
!   }

-  remove environment[name="copilot", repository=module_template] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=cicd-workflows] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=toolchains_rust] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=toolchains_gcc_packages] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=orchestrator] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=apt-install] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=devcontainer] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=feo] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=bazel_platforms] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=os_autosd] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=lifecycle] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=logging] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score-crates] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=inc_someip_gateway] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=dash-license-scan] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=time] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=bazel_cpp_toolchains] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score_rust_policies] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name="more-disk-space"] {
!     code_scanning_default_languages = [
-      "javascript"
-      "typescript"
+      "javascript-typescript"
!     ]
!   }

-  remove environment[name="copilot", repository=more-disk-space] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=inc_security_crypto] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=rules_imagefs] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=infrastructure] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=score_cpp_policies] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name="cicd-actions"] {
!     code_scanning_default_languages = [
-      "javascript"
-      "typescript"
+      "javascript-typescript"
!     ]
!   }

-  remove environment[name="copilot", repository=cicd-actions] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=qnx_unit_tests] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

-  remove environment[name="copilot", repository=mcp-servers] {
-    deployment_branch_policy = "all"
-    name                     = "copilot"
-    prevent_self_review      = false
-    reviewers                = []
-    wait_timer               = 0
-  }

  
!   repository[name="coverage_tool"] {
!     code_scanning_default_languages = [
-      "actions"
-      "c-cpp"
-      "python"
-      "rust"
!     ]
!   }
  
  Plan: 0 to add, 5 to change, 35 to delete.

@heurtematte

Copy link
Copy Markdown
Contributor

/otterdog done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants