Tom Boucher 9f9c1a7909 chore: add branch protection ruleset specs (PR-1 of 3) ...

Checks in JSON specs for three rulesets (main-protection,
release-branches, tag-immutability), a CODEOWNERS file (advisory),
and scripts/sync-rulesets.sh to apply them.

Enforcement is `disabled` in all three files — PR-2 will apply with
`evaluate` for a 1-week dry-run, PR-3 will flip to `active`.

See docs/branch-protection.md for the full rollout plan.

2026-05-22 09:19:41 -04:00

..

changeset

Enforce documentation updates via lint:docs + PR templates (#3651)

2026-05-16 13:09:54 -04:00

audit-workflow-script-paths.cjs

feat(#2995): post-install path audit for workflow-invoked scripts (#2996)

2026-05-01 21:13:45 -04:00

base64-scan.sh

ci(security): add prompt injection, base64, and secret scanning

2026-03-24 13:23:51 -04:00

build-hooks.js

fix(3579): ship graphify hook + lib/ helper through build-hooks + install (#3640)

2026-05-16 13:14:19 -04:00

command-contract-helpers.cjs

fix(3597): windows test parity batch — CRLF parsers, ESM file URLs, posix-tmp, bash-only skips, retry bump

2026-05-16 12:03:44 -04:00

diff-touches-shipped-paths.cjs

fix(3621): release-sdk hotfix cherry-picks test-fixture commits (#3623)

2026-05-15 22:43:21 -04:00

fix-slash-commands.cjs

fix(3583): normalize retired colon-form commands in generated Claude/Qwen/Hermes SKILL.md bodies (#3629)

2026-05-16 13:09:58 -04:00

gen-inventory-manifest.cjs

docs: close doc drift vectors — bidirectional parity, manifest, schema-driven config (#2479)

2026-04-20 09:39:05 -04:00

lint-command-contract.cjs

fix: apply CodeRabbit auto-fixes

2026-05-05 22:36:38 +00:00

lint-descriptions.cjs

feat(#2789): trim skill description anti-patterns; enforce 100-char budget (#2823)

2026-04-29 08:14:11 -04:00

lint-docs-required.cjs

Enforce documentation updates via lint:docs + PR templates (#3651)

2026-05-16 13:09:54 -04:00

lint-no-source-grep-extras.cjs

feat(#2982): extend no-source-grep lint to catch var-binding readFileSync.includes() (#2985)

2026-05-01 19:50:10 -04:00

lint-no-source-grep.cjs

feat(#2982): extend no-source-grep lint to catch var-binding readFileSync.includes() (#2985)

2026-05-01 19:50:10 -04:00

lint-pr-check-project-dir.cjs

test: forbid cwd in PR checkers

2026-05-15 20:00:29 -04:00

lint-shared-module-handsync.cjs

feat(3575): Phase 6 — CJS↔SDK seam migration end-to-end complete (#3524) (#3577)

2026-05-16 13:14:24 -04:00

lint-shell-command-projection-drift.cjs

feat(shell-projection): add shim wrapper drift guard (#3448)

2026-05-12 20:49:43 -04:00

lint-skill-deps.cjs

feat(skill-surface): install-time profiles + runtime /gsd:surface (#3408) (#3456)

2026-05-13 12:45:16 -04:00

lint-test-file-count.allowlist.json

chore: introduce CommandRoutingHub and migrate phase-command-router (PoC) (#3828)

2026-05-21 23:32:10 -04:00

lint-test-file-count.cjs

chore(tests): lint rule — cap test files per production module at 2 (#3738)

2026-05-20 20:37:07 -04:00

pr-template-policy.cjs

fix(ci): replace minimatch with path.matchesGlob in pr-template-policy (#3701)

2026-05-18 12:41:01 -04:00

prompt-injection-scan.sh

test(3596): adversarial security/prompt-injection abuse suite (#3654)

2026-05-17 00:34:53 -04:00

release-tarball-smoke.cjs

chore(3686): add release-tarball lifecycle smoke to install-smoke workflow (#3692)

2026-05-18 13:05:02 -04:00

run-tests.cjs

fix(3597): resolve CR threads — drop substring-assertion guidance, use $testDir

2026-05-16 10:44:51 -04:00

secret-scan.sh

test(3596): adversarial security/prompt-injection abuse suite (#3654)

2026-05-17 00:34:53 -04:00

shared-module-handsync-allowlist.json

feat(3081): auto-trim review prompts for small-context model reviewers (#3708)

2026-05-18 23:13:09 -04:00

strip-prose-atrefs.cjs

fix(coderabbit): resolve all 12 findings on PR #3152

2026-05-05 16:06:29 -04:00

sync-rulesets.sh

chore: add branch protection ruleset specs (PR-1 of 3)

2026-05-22 09:19:41 -04:00

verify-tarball-sdk-dist.sh

fix(#2647): guard tarball ships sdk/dist so gsd-sdk query works (#2671)

2026-04-24 18:05:18 -04:00