Skip to content

Fix release-tag protection to match GitHub glob semantics - #23

Merged
rldyourmnd merged 1 commit into
mainfrom
fix/semver-tag-protection-glob
Sep 13, 2026
Merged

rldyourmnd merged 1 commit into
mainfrom
fix/semver-tag-protection-glob

Conversation

@rldyourmnd

Copy link
Copy Markdown
Contributor

The release-tag selector used regex-style plus signs, but GitHub evaluates these selectors as fnmatch globs. Normal tags such as 0.1.2 therefore did not match the intended immutable-tag rule. Use a slash-bounded glob and preserve the existing signature, update, deletion and non-fast-forward protections without adding bypasses.

Validation: full scripts/validate_module.sh passed; new regressions cover actual SemVer refs, prereleases, branch refs, nested tags and unrelated aliases; native repository projection apply/verify passed. GitHub ruleset readback/application is a separate consumer operation. Syntax reference: https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-rulesets/creating-rulesets-for-a-repository .

Signed-off-by: rldyourmnd <danil@nddev.it.com>
@rldyourmnd
rldyourmnd merged commit 29f13d1 into main Sep 13, 2026
5 checks passed
@rldyourmnd
rldyourmnd deleted the fix/semver-tag-protection-glob branch September 13, 2026 05:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant