Repository settings guidelines: Apply rules also to branch creation

[arminru]

This setting enables the branch protection rule to not only cover PRs targeting an existing branch, but also the creation of new branches.

For the main branch, this doesn't make a difference as it will usually be there, but for the **/** pattern, as per

community/docs/how-to-configure-new-repository.md

Lines 119 to 121 in 8e17c30

	#### Branch protection rule: `**/**`
	Same as for [`main`](#branch-protection-rule-main) above.

the rules for main are re-used.

Docs:
https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/managing-a-branch-protection-rule

[jpkrohling]

Wouldn't it prevent dependabot and similar tools from working? They push PRs from branches they create on the target repo, from what I remember.

[austinlparker]

Wouldn't it prevent dependabot and similar tools from working? They push PRs from branches they create on the target repo, from what I remember.

If you're using dependabot you can make a branch protection rule for its branches specifically.

[jpkrohling]

Sounds good. As long as we are not breaking current tools with this change, I'm fine with the change.

[arminru]

@jpkrohling exactly as @austinlparker said - the rules for Dependabot and Renovate overrule the main and the **/** catchall rule:

community/docs/how-to-configure-new-repository.md

Lines 98 to 117 in 3f4b528

	#### Branch protection rule: `dependabot/**/**`
	Everything not mentioned is unchecked.
	* Allow force pushes: :heavy_check_mark:
	* `Everyone` (all users with push access)
	* (so that dependabot can rebase its pull requests)
	* Allow deletions: :heavy_check_mark:
	* (so that branches can be deleted after merging)
	**Note:** "Require a pull request before merging" and
	"Require status checks to pass before merging" both need to be `unchecked` so that
	these branches can be directly updated (without going through a pull request).
	#### Branch protection rule: `renovate/**/**`
	Same as for [`dependabot/**/**`](#branch-protection-rule-dependabot) above.
	This branch protection rule is not set up automatically, but can be added for any
	repositories that are using [Renovate](https://github.com/apps/renovate).

[danielgblanco]

@arminru can you create an issue to apply this to all repos and link it here?

[arminru]

@danielgblanco Done! #2213