root-signing-staging branch protection changed

[jku]

root-signing-staging has a setup where sigstore-bot can push to two branches main and publish.

Pushing to both worked May 23rd 10:19 GMT+3. Then on May 24th 15:26 GMT+3 pushing to main worked but pushing to publish failed with "protected branch hook declined".

So something clearly changed in the config. I can see that main and publish have slightly different configuration so this is likely an easy fix, I'm just a bit worried how the setup changed?

CC @kommendorkapten @haydentherapper

[jku]

I'm just a bit worried how the setup changed?

To be clear: the yaml hasn't changed in months: I'm referring to the actual setup in the GHproject ... but possibly the branch protection settings haven't been applied after that last change