Disable auto-merge in root-signing

[haydentherapper]

This requires enabling rebase or squash merges, which are now disallowed to match the setup in root-signing-staging.

Summary

Release Note

Documentation

[github-actions]

🍹 preview on sigstore-github-sync/sigstore/github-prod

Pulumi report

Previewing update (sigstore/github-prod)

View Live: https://app.pulumi.com/sigstore/sigstore-github-sync/github-prod/previews/6249ec67-bf03-4599-830e-a3e53afe4f79

@ Previewing update.....
pulumi:pulumi:Stack: (same)
[urn=urn:pulumi:github-prod::sigstore-github-sync::pulumi:pulumi:Stack::sigstore-github-sync-github-prod]
~ github:index/repository:Repository: (update) 🔒
    [id=root-signing]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/repository:Repository::root-signing]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
  ~ allowAutoMerge: true => false
~ github:index/branchProtection:BranchProtection: (update)
    [id=BPR_kwDOFotDCM4DA1RL]
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-main]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
  ~ requiredLinearHistory     : true => false
  ~ requiredPullRequestReviews: [
      ~ [0]: {
              ~ dismissalRestrictions: [
                    [0]: "T_kwDOBDzYIc4AYVWd"
                  - [1]: "MDQ6VGVhbTQ4OTkzMDk="
                ]
              ~ pullRequestBypassers : [
                  + [0]: "MDQ6VXNlcjg2ODM3MzY5"
                ]
            }
    ]
  ~ requiredStatusChecks      : [
      ~ [0]: {
              ~ contexts: [
                  ~ [0]: "lint" => "DCO"
                  ~ [1]: "test" => "yamllint"
                  ~ [2]: "client" => "test"
                  ~ [3]: "DCO" => "lint"
                  - [4]: "yamllint"
                  - [5]: "validate"
                ]
            }
    ]
  ~ restrictPushes            : [
      ~ [0]: {
              ~ pushAllowances: [
                  ~ [0]: "U_kgDOByoNQQ" => "T_kwDOBDzYIc4AYVWd"
                  ~ [1]: "T_kwDOBDzYIc4AYVWd" => "MDQ6VXNlcjg2ODM3MzY5"
                  - [2]: "MDQ6VGVhbTQ4OTkzMDk="
                  - [3]: "MDQ6VXNlcjg2ODM3MzY5"
                ]
            }
    ]
+ github:index/branchProtection:BranchProtection: (create)
    [urn=urn:pulumi:github-prod::sigstore-github-sync::github:index/branchProtection:BranchProtection::root-signing-publish]
    [provider=urn:pulumi:github-prod::sigstore-github-sync::pulumi:providers:github::default_6_2_1::c4864a06-f2c2-4a7a-b9b8-d9a955761310]
    allowsDeletions              : false
    allowsForcePushes            : false
    enforceAdmins                : true
    lockBranch                   : false
    pattern                      : "publish"
    repositoryId                 : "MDEwOlJlcG9zaXRvcnkzNzgyMjU0MTY="
    requireConversationResolution: false
    requireSignedCommits         : false
    requiredLinearHistory        : false
    requiredPullRequestReviews   : [
        [0]: {
            dismissStaleReviews         : true
            dismissalRestrictions       : [
                [0]: "T_kwDOBDzYIc4AYVWd"
            ]
            pullRequestBypassers        : [
                [0]: "MDQ6VXNlcjg2ODM3MzY5"
            ]
            requireCodeOwnerReviews     : false
            requireLastPushApproval     : true
            requiredApprovingReviewCount: 1
            restrictDismissals          : true
        }
    ]
    requiredStatusChecks         : [
        [0]: {
            contexts  : []
            strict    : false
        }
    ]
    restrictPushes               : [
        [0]: {
            blocksCreations: true
            pushAllowances : [
                [0]: "T_kwDOBDzYIc4AYVWd"
                [1]: "MDQ6VXNlcjg2ODM3MzY5"
                [2]: "U_kgDOByoNQQ"
            ]
        }
    ]
Resources:
+ 1 to create
~ 2 to update
3 changes. 591 unchanged