Skip to content

Keep the maintainer as the only commit author on main #145

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
squarepots merged 1 commit into from
Sep 30, 2026
Merged

Keep the maintainer as the only commit author on main #145

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions AGENTS.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,9 @@ path, account mirror, or parallel source of truth.
tests and the documentation it changes. Change the version only in a
separate release commit; a product pull request leaves the version files
untouched.
- The maintainer is the only commit author on `main`. Do not add a
`Co-authored-by` or other attribution trailer for a tool or bot to a commit
or squash message, and do not merge a bot-authored commit as is.

## Documentation routing

Expand Down
5 changes: 5 additions & 0 deletions docs/testing.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,11 @@ routine update creates a branch only after dashboard approval. Renovate opens
security remediation PRs immediately, without automerge; GitHub Dependabot
Alerts remain a signal but Dependabot Security Updates PRs are disabled.

A Renovate pull request is a proposal, not a merge candidate. Merging it
directly records the bot as a commit author and lists it as a contributor.
Recreate its change in a maintainer-authored commit and pull request, run the
checks for the changed paths there, then close Renovate's pull request.

GitHub CodeQL default setup, rather than a repository workflow, scans Actions,
JavaScript/TypeScript, and Rust. Its effective language list and the
repository's SHA-pinning policy must be read from GitHub when making a claim
Expand Down
Loading