feat: track settings as code

.github/settings.yml

@@ -0,0 +1,61 @@
+repository:
+  name: release-it-docker
+  description: Docker image wrapper for release-it
+  default_branch: main
+
+  # Prevent strategies other than basic merge, as they interfere with conventional changelog version inference
+  allow_squash_merge: false
+  allow_rebase_merge: false
+  # Instead, merge by merge commit
+  allow_merge_commit: true
+  # Clean up branches when PRs merge
+  delete_branch_on_merge: true
+
+rulesets:
+  - name: Tags rules
+    target: tag
+    enforcement: active
+    conditions:
+      ref_name:
+        include:
+          - "~ALL"
+        exclude: []
+    rules:
+      - type: creation
+      - type: deletion
+      - type: non_fast_forward
+      - type: update
+  - name: Default branch rules
+    target: branch
+    enforcement: active
+    conditions:
+      ref_name:
+        include:
+          - "~DEFAULT_BRANCH"
+        exclude: []
+    bypass_actors:
+      - actor_id: 5
+        actor_type: RepositoryRole
+        bypass_mode: pull_request
+    rules:
+      - type: creation
+      - type: deletion
+      - type: non_fast_forward
+      - type: pull_request
+        parameters:
+          dismiss_stale_reviews_on_push: true
+          require_code_owner_review: true
+          require_last_push_approval: false
+          # Use codeowners vs. review count, so codeowners can merge without review
+          required_approving_review_count: 0
+          required_review_thread_resolution: true
+      # Require workflow job as check to enable PR up-to-date rule
+      - type: required_status_checks
+        parameters:
+          required_status_checks:
+            - context: build-docker-images
+              integration_id: 15368 # GitHub Actions integration ID
+          # Requires PR branches to be up-to-date with target
+          strict_required_status_checks_policy: true
+
+collaborators: [] # No collaborators defined

.github/workflows/push-workflow.yaml

@@ -1,6 +1,7 @@
 name: Push workflow
 on: [push]
 jobs:
+  # All PR jobs should be listed in required_status_checks https://github.com/rcwbr/release-it-docker/blob/0e9a5bcd8da40cac01686b6312df09bffdee810e/.github/settings.yml#L54
   build-docker-images:
     name: Build Docker images
     runs-on: ubuntu-24.04