Current Situation:

• Our release workflow creates commits and pushes to our main branch in order to bump versions in package.json as well as to commit CHANGELOG.md additions.
• Our main branch is protected by branch protection rules
• For the workflow to push to the protected main branch, we use a separate Github account wikibase-suite-bot
  • This account has the admin role in our project
  • This accounts credentials as well as 2FA auth need to be shared with the team

Goal:

• Try out Github rulesets in order to use an SSH key to push to protected main
• This will make the bot account with all its complications obsolete
• Github rulesets appear to be the more modern way to setup branch protections

Acceptance Criteria:

• CI release workflow can push to main that is otherwise protected by Github rulesets
• Old branch protections rules are disabled

[optional] Notes:

[optional] Open Questions: