- **Concurrency limits**: `prConcurrentLimit` 50 → 10, `branchConcurrentLimit` 5 → 10 (every PR needs a branch, so the old 5 made the 50 meaningless).
- **Security bypass**: `vulnerabilityAlerts.schedule = ["at any time"]` so weekend CVE fixes aren't held until Monday by the weekday `schedule`.
- **Stability buffer**: `minimumReleaseAge: "3 days"` so releases age before they're opened/automerged.
- **Drop `assignees`** (same single user as `reviewers`) — noise on every PR, including auto-merged ones.
Closes #46
Closes #47
Closes #48
Closes #49
- Reconcile concurrency limits: prConcurrentLimit 50 -> 10 and
branchConcurrentLimit 5 -> 10 (every PR needs a branch, so the old 5 capped
effective PRs and made 50 meaningless).
- Let vulnerability updates bypass the weekday schedule
(vulnerabilityAlerts.schedule = at any time) so weekend CVE fixes are not
held until Monday.
- Add minimumReleaseAge = 3 days so a release ages before it is opened or
automerged (guards against broken/yanked releases).
- Drop redundant assignees (same single user as reviewers) -- noise on every
PR, including auto-merged ones.
Closes#46Closes#47Closes#48Closes#49
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
prConcurrentLimit50 → 10,branchConcurrentLimit5 → 10 (every PR needs a branch, so the old 5 made the 50 meaningless).vulnerabilityAlerts.schedule = ["at any time"]so weekend CVE fixes aren't held until Monday by the weekdayschedule.minimumReleaseAge: "3 days"so releases age before they're opened/automerged.assignees(same single user asreviewers) — noise on every PR, including auto-merged ones.Closes #46
Closes #47
Closes #48
Closes #49