From 5b7c370d3dec62df99df5d45d001e2168aa1d170 Mon Sep 17 00:00:00 2001 From: Ironystock Date: Tue, 28 Apr 2026 09:44:00 -0700 Subject: [PATCH] chore(ci): drop Analyze (go) from required ruleset checks MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit CodeQL only runs on PRs that touch Go source. Workflow-only and docs-only PRs (like the 4 dependabot github_actions bumps that just opened) never trigger CodeQL — but the prior ruleset listed 'Analyze (go)' as required. Result: those PRs were blocked on a required check that would never run. Live ruleset (id 15662572) updated via gh api to remove 'Analyze (go)' from required_status_checks. Six checks remain required: Test (ubuntu-latest), Test (macos-latest), Test (windows-latest), Mod Tidy Drift, GoReleaser Config, Lint CodeQL still runs and is still visible in the PR check list — just not blocking. Solo-dev appropriate; we're trading a strict gate for the ability to merge non-Go PRs without admin bypass. This commit syncs the version-controlled ruleset JSON in the repo to match the live ruleset. To re-apply on a fresh repo: gh api --method PUT \ repos/captured-ventures/rememberize-cli/rulesets/15662572 \ --input .github/rulesets/main-protection.json Co-Authored-By: Claude Opus 4.7 --- .github/rulesets/main-protection.json | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/rulesets/main-protection.json b/.github/rulesets/main-protection.json index a5abea9..0e21cc3 100644 --- a/.github/rulesets/main-protection.json +++ b/.github/rulesets/main-protection.json @@ -33,8 +33,7 @@ { "context": "Test (windows-latest)" }, { "context": "Mod Tidy Drift" }, { "context": "GoReleaser Config" }, - { "context": "Lint" }, - { "context": "Analyze (go)" } + { "context": "Lint" } ] } }