Closed jeffwidman closed 1 week ago
It just felt unsafe to me that as soon as :dependabot: opened https://github.com/FactoryBoy/factory_boy/pull/1074, I could have immediately merged it. So for now I defaulted to safety and enabled a branch protection including mandatory CI checks, 1 PR approval, and no force-pushing.
No problem if we want to turn this off, but defaulting to safety seemed best for now.
I saw this on the home page:
I assume this was an accidental oversight... Or is there a reason this isn't currently enabled?
On other projects I help maintain, typically we setup the following:
master
is locked against pushes by everyone, only merge via PR.