From 3900059f7cbd83537475837d9e4a2243853cbb40 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sat, 12 Sep 2026 06:10:26 +0000
Subject: [PATCH 1/2] fix: disable credential persistence on standards baseline
 checkout

Co-authored-by: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
---
 .github/workflows/hypatia-scan-reusable.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/hypatia-scan-reusable.yml b/.github/workflows/hypatia-scan-reusable.yml
index cc58c0cb..01252a5e 100644
--- a/.github/workflows/hypatia-scan-reusable.yml
+++ b/.github/workflows/hypatia-scan-reusable.yml
@@ -176,6 +176,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: hyperpolymath/standards
+          persist-credentials: false
           # Includes the filter's completion output and literal-glob matching.
           # Keep the helper immutable and compatible with the strict gate.
           ref: 6b0bfce648cf9b306693cea0af0bd5f6fc9fea0f

From 9d5437bc483e714468f9fa343e34ea098c40fb6d Mon Sep 17 00:00:00 2001
From: "coderabbitai[bot]"
 <136622811+coderabbitai[bot]@users.noreply.github.com>
Date: Sat, 12 Sep 2026 06:11:35 +0000
Subject: [PATCH 2/2] fix(rulesets): allow tag creation and squash merges

---
 config/rulesets/Immutable-Tags.json | 1 -
 config/rulesets/Optimus-Branch.json | 2 +-
 2 files changed, 1 insertion(+), 2 deletions(-)

diff --git a/config/rulesets/Immutable-Tags.json b/config/rulesets/Immutable-Tags.json
index 53739afe..768af966 100644
--- a/config/rulesets/Immutable-Tags.json
+++ b/config/rulesets/Immutable-Tags.json
@@ -10,7 +10,6 @@
   },
   "bypass_actors": [],
   "rules": [
-    {"type": "creation"},
     {"type": "deletion"},
     {"type": "non_fast_forward"},
     {"type": "update"},
diff --git a/config/rulesets/Optimus-Branch.json b/config/rulesets/Optimus-Branch.json
index 03ad4882..a1aee726 100644
--- a/config/rulesets/Optimus-Branch.json
+++ b/config/rulesets/Optimus-Branch.json
@@ -29,7 +29,7 @@
         "required_review_thread_resolution": true,
         "require_extra_approval_for_unattributed_changes": true,
         "required_reviewers": [],
-        "allowed_merge_methods": []
+        "allowed_merge_methods": ["squash"]
       }
     },
     {