From 104bedb64685eefddd5e1ecd931fc96bb8216992 Mon Sep 17 00:00:00 2001
From: The Apache Software Foundation <root-asf-gitbox-commits@apache.org>
Date: Fri, 15 May 2026 14:24:05 -0500
Subject: [PATCH 1/3] Set up default protection ruleset for default and release
 branches

---
 .asf.yaml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.asf.yaml b/.asf.yaml
index 9780566..1ceaa88 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -30,6 +30,20 @@ github:
   protected_branches:
     main: {}
 
+  rulesets:
+    - name: "Default Branch Protection"
+      type: branch
+      branches:
+        includes:
+          - "~DEFAULT_BRANCH"
+          - "release/*"
+          - "rel/*"
+        excludes: []
+      bypass_teams:
+        - root
+      restrict_deletion: true
+      restrict_force_push: true
+
   copilot_code_review:
     enabled: true
     review_drafts: true

From b9c8611ec3ea438ed25c1e7f10be46b14a3f913e Mon Sep 17 00:00:00 2001
From: Boris Stoyanov <bss.stoyanov@gmail.com>
Date: Thu, 10 Sep 2026 10:24:28 +0300
Subject: [PATCH 2/3] Drop the branches block from the protection ruleset

No release/* or rel/* branches exist in this repo, and .asf.yaml already
defaults branches to ~DEFAULT_BRANCH when the key is omitted, so the block
only restated the default.
---
 .asf.yaml | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/.asf.yaml b/.asf.yaml
index 1ceaa88..53af64d 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -33,12 +33,6 @@ github:
   rulesets:
     - name: "Default Branch Protection"
       type: branch
-      branches:
-        includes:
-          - "~DEFAULT_BRANCH"
-          - "release/*"
-          - "rel/*"
-        excludes: []
       bypass_teams:
         - root
       restrict_deletion: true

From de14bc01842c4b4619d833dc67d4b53ce94e520f Mon Sep 17 00:00:00 2001
From: Boris Stoyanov <bss.stoyanov@gmail.com>
Date: Thu, 10 Sep 2026 10:24:28 +0300
Subject: [PATCH 3/3] Do not run Copilot review on drafts or on every push

Copilot review credits are limited; reviewers can trigger a review by hand
when one is wanted.
---
 .asf.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.asf.yaml b/.asf.yaml
index 53af64d..5917f58 100644
--- a/.asf.yaml
+++ b/.asf.yaml
@@ -40,5 +40,5 @@ github:
 
   copilot_code_review:
     enabled: true
-    review_drafts: true
-    review_on_push: true
+    review_drafts: false
+    review_on_push: false