rulesets/nixpkgs: allow dependabot branch creation

[wolfgangwalther]

Dependabot can't create branches anymore to update github-actions: https://github.com/NixOS/nixpkgs/network/updates

Broke in #132.

I hope this fixes it, but the double star glob was confusing the last time, so let's see...

[infinisil]

LGTM, applied!

[wolfgangwalther]

Hm, that didn't seem to work, yet: https://github.com/NixOS/nixpkgs/network/updates/14302654/jobs

Tried twice, both still failed with that "can't create branch" error.

[wolfgangwalther]

Older dependabot PRs are here: https://github.com/NixOS/nixpkgs/pulls?q=is%3Apr%20author%3Aapp%2Fdependabot%20is%3Aclosed

The branch pattern is certainly dependabot/.... But it has multiple /. Apparently ** doesn't match multiple of these, because:

% gh api /repos/NixOS/nixpkgs/rules/branches/dependabot/test
[]

(that's good)

% gh api /repos/NixOS/nixpkgs/rules/branches/dependabot/test/test
[
  {
    "type": "creation",
    "ruleset_source_type": "Repository",
    "ruleset_source": "NixOS/nixpkgs",
    "ruleset_id": 6008904
  }
]

That's bad.

[wolfgangwalther]

Aha, maybe I misread the docs, they say:

You can include any number of slashes after qa with qa/**/*

So maybe:

refs/heads/dependabot/**/*

[wolfgangwalther]

I assume we need the same for the revert branch, so:

refs/heads/revert-*/**/*

[wolfgangwalther]

@infinisil should I create a new PR about this or did you keep track of this?