[INFRA] Set up default rulesets for default and release branches

.asf.yaml

@@ -13,11 +13,14 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+# This file is used to configure ASF GitHub repositories.
+# It is used by the ASF GitHub bot to automate various tasks such as labeling,
+# merging, and notifications.
+# For more information, see https://github.com/apache/infrastructure-asfyaml/blob/main/README.md
+
 github:
   description: "Apache OFBiz is an open source product for the automation of enterprise processes. It includes framework components and business applications for ERP, CRM, E-Business/E-Commerce, Supply Chain Management and Manufacturing Resource Planning. OFBiz provides a foundation and starting point for reliable, secure and scalable enterprise solutions."
-  homepage:  https://ofbiz.apache.org/
-  dependabot_alerts:  true
-  dependabot_updates: false
+  homepage: https://ofbiz.apache.org/
   labels:
     - ofbiz
     - plugins
@@ -32,20 +35,34 @@ github:
     - content
     - geospatial
     - hacktoberfest
+
   enabled_merge_buttons:
-    # enable squash button:
-    squash:  true
-    # default commit message when merging with a squash commit
-    # can either be: DEFAULT | PR_TITLE | PR_TITLE_AND_COMMIT_DETAILS | PR_TITLE_AND_DESC
+    merge: false
+    rebase: true
+    squash: true
     squash_commit_message: PR_TITLE_AND_DESC
-    # enable merge button:
-    merge:   true
-    # default commit message when merging with a merge commit
-    # can either be: DEFAULT | PR_TITLE | PR_TITLE_AND_DESC
-    merge_commit_message: PR_TITLE_AND_DESC
-    # enable rebase button:
-    rebase:  true
+
+  rulesets:
+    - name: "Default Branch Protection"
+      type: branch
+      branches:
+        includes:
+          - "~DEFAULT_BRANCH"
+          - "release*"
+        excludes: []
+      bypass_teams:
+        - root
+      restrict_deletion: true
+      restrict_force_push: true
+      required_linear_history: true
+
+  dependabot_alerts: true
+  dependabot_updates: false
 
 notifications:
-  jobs:  notifications@ofbiz.apache.org
-  jira_options: link label
+  commits: commits@ofbiz.apache.org
+  discussions: notifications@ofbiz.apache.org # discussions are not used, but we want to be notified if they are created
+  issues: notifications@ofbiz.apache.org # issues are not used, but we want to be notified if they are created
+  pullrequests: notifications@ofbiz.apache.org
+  jobs: notifications@ofbiz.apache.org
+  jira_options: link label # if a JIRA issue is mentioned in the title of a pull request, add to the JIRA issue a comment with a link to the pull request and add the "has-pull-request" label to the JIRA issue