Remove linear history requirement for root-signing branches

[haydentherapper]

Summary

Release Note

Documentation

[github-actions]

🍹 preview on sigstore-github-sync/sigstore/github-prod

Pulumi report

Previewing update (sigstore/github-prod)

View Live: https://app.pulumi.com/sigstore/sigstore-github-sync/github-prod/previews/c229a5e3-4ca2-4e49-98e5-e7b46200e838

@ Previewing update.....
pulumi:pulumi:Stack: (same)
[urn=urn:pulumi:github-prod::sigstore-github-sync::pulumi:pulumi:Stack::sigstore-github-sync-github-prod]
~ github:index/repository:Repository: (update) 🔒
    [id=root-signing]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/repository:Repository::root-signing]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
  ~ allowAutoMerge          : true => false
  ~ allowMergeCommit        : false => true
  ~ allowRebaseMerge        : true => false
  ~ allowSquashMerge        : true => false
    archived                : false
    autoInit                : false
    deleteBranchOnMerge     : true
  + description             : "TUF repository for Sigstore trust root"
    hasDiscussions          : false
    hasDownloads            : true
    hasIssues               : true
    hasProjects             : true
    hasWiki                 : true
    isTemplate              : false
    mergeCommitMessage      : "PR_TITLE"
    mergeCommitTitle        : "MERGE_MESSAGE"
    name                    : "root-signing"
    squashMergeCommitMessage: "COMMIT_MESSAGES"
    squashMergeCommitTitle  : "COMMIT_OR_PR_TITLE"
    visibility              : "public"
    vulnerabilityAlerts     : false
    webCommitSignoffRequired: true
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4DA1RL]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-main]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
  ~ requiredLinearHistory     : true => false
  ~ requiredPullRequestReviews: [
      ~ [0]: {
              ~ dismissalRestrictions: [
                    [0]: "T_kwDOBDzYIc4AYVWd"
                  - [1]: "MDQ6VGVhbTQ4OTkzMDk="
                ]
              ~ pullRequestBypassers : [
                  + [0]: "MDQ6VXNlcjg2ODM3MzY5"
                ]
            }
    ]
  ~ requiredStatusChecks      : [
      ~ [0]: {
              ~ contexts: [
                  ~ [0]: "lint" => "DCO"
                  ~ [1]: "test" => "yamllint"
                  ~ [2]: "client" => "test"
                  ~ [3]: "DCO" => "lint"
                  - [4]: "yamllint"
                  - [5]: "validate"
                ]
            }
    ]
  ~ restrictPushes            : [
      ~ [0]: {
              ~ pushAllowances: [
                  ~ [0]: "U_kgDOByoNQQ" => "T_kwDOBDzYIc4AYVWd"
                  ~ [1]: "T_kwDOBDzYIc4AYVWd" => "MDQ6VXNlcjg2ODM3MzY5"
                  ~ [2]: "MDQ6VGVhbTQ4OTkzMDk=" => "U_kgDOByoNQQ"
                  - [3]: "MDQ6VXNlcjg2ODM3MzY5"
                ]
            }
    ]
+ github:index/branchProtection:BranchProtection: (create)
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-publish]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    lockBranch                   : false
    pattern                      : "publish"
    repositoryId                 : "MDEwOlJlcG9zaXRvcnkzNzgyMjU0MTY="
    requireConversationResolution: false
    requireSignedCommits         : false
    requiredLinearHistory        : false
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            dismissalRestrictions       : [
                [0]: "T_kwDOBDzYIc4AYVWd"
            ]
            pullRequestBypassers        : [
                [0]: "MDQ6VXNlcjg2ODM3MzY5"
            ]
            requireCodeOwnerReviews     : false
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 1
            restrictDismissals          : true
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : []
            strict    : false
        }
    ]
    restrictPushes               : [
        [0]: {
            blocksCreations: true
            pushAllowances : [
                [0]: "T_kwDOBDzYIc4AYVWd"
                [1]: "MDQ6VXNlcjg2ODM3MzY5"
                [2]: "U_kgDOByoNQQ"
            ]
        }
    ]
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4DA1RO]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-test-ceremony/*]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
  ~ requiredLinearHistory: true => false
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4DA1RR]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-ceremony/*]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
  ~ requiredLinearHistory: true => false
@ Previewing update....
Resources:
+ 1 to create
~ 4 to update
5 changes. 589 unchanged