Configure branch protection rules for main

[daviburg]

Problem

The repository has no branch protection rules configured, leaving main open to direct pushes and unreviewed merges.

The .NET SDK, LSP, and Samples repos all enforce branch protection through their CI workflows and CODEOWNERS — the Python SDK should match.

What needs to be configured

Branch protection on main

Configure via GitHub repo settings (Settings → Branches → Branch protection rules):

Setting	Value	Rationale
Require pull request before merging	Yes	Prevents direct pushes to main
Required approvals	1	Matches .NET SDK pattern
Dismiss stale approvals	Yes	Re-review after force-push
Require status checks to pass	Yes	CI must be green
Required status checks	lint, build-and-test	From ci.yml (after #2 is completed)
Require branches to be up to date	Yes	No stale merges
Require conversation resolution	Yes	All review comments addressed
Restrict who can push	Admins only	Standard for Azure org repos

CODEOWNERS verification

The existing CODEOWNERS file assigns @Azure/azure-logicapps-team — verify this team exists and has write access to the repo.

Prerequisites

• Issue Replace .NET CI/CD workflows with Python equivalents #2 (CI/CD workflows) must be completed first so status checks can reference the correct job names

Acceptance criteria

• main branch requires PR with at least 1 approval
• CI status checks required before merge
• Direct pushes to main blocked for non-admins
• CODEOWNERS team has correct permissions

[hallvictoria]

Pending settings:

• Require status checks to pass
• Required status checks

#15 must first be merged. Afterwards, I can create the pipelines and relevant status checks.

[hallvictoria]

Status checks created and enforced.