Skip to content

chore: add codeowners - #352

Merged
crutchcorn merged 1 commit into
mainfrom
codeowners
Aug 9, 2026
Merged

chore: add codeowners#352
crutchcorn merged 1 commit into
mainfrom
codeowners

Conversation

@crutchcorn

@crutchcorn crutchcorn commented Aug 9, 2026

Copy link
Copy Markdown
Member

As part of our ongoing security hardening, we're mandating specific sensitive release files to be approved by the core maintainers team.

Summary by CodeRabbit

  • Chores
    • Added repository ownership coverage for configuration, automation, and release-management files.

@nx-cloud

nx-cloud Bot commented Aug 9, 2026

Copy link
Copy Markdown

View your CI Pipeline Execution ↗ for commit d3eb6e6

Command Status Duration Result
nx affected --targets=test:sherif,test:knip,tes... ✅ Succeeded 14s View ↗
nx run-many --target=build --exclude=examples/** ✅ Succeeded <1s View ↗

☁️ Nx Cloud last updated this comment at 2026-08-09 01:57:34 UTC

@coderabbitai

coderabbitai Bot commented Aug 9, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

The change adds CODEOWNERS rules for repository configuration and tooling paths. All listed paths are assigned to the TanStack core team.

Changes

CODEOWNERS Configuration

Layer / File(s) Summary
Add repository ownership rules
.github/CODEOWNERS
Adds ownership entries for .github/, .nx/, nx.json, .changeset/config.json, scripts/, and .npmrc.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description explains the CODEOWNERS purpose but omits the required Changes, Checklist, and Release Impact sections. Use the repository template and complete the Changes, Checklist, and Release Impact sections.
✅ Passed checks (4 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly identifies the main change: adding CODEOWNERS rules.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codeowners

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-new Bot commented Aug 9, 2026

Copy link
Copy Markdown
@tanstack/angular-store

npm i https://pkg.pr.new/@tanstack/angular-store@352

@tanstack/lit-store

npm i https://pkg.pr.new/@tanstack/lit-store@352

@tanstack/octane-store

npm i https://pkg.pr.new/@tanstack/octane-store@352

@tanstack/preact-store

npm i https://pkg.pr.new/@tanstack/preact-store@352

@tanstack/react-store

npm i https://pkg.pr.new/@tanstack/react-store@352

@tanstack/solid-store

npm i https://pkg.pr.new/@tanstack/solid-store@352

@tanstack/store

npm i https://pkg.pr.new/@tanstack/store@352

@tanstack/svelte-store

npm i https://pkg.pr.new/@tanstack/svelte-store@352

@tanstack/vue-store

npm i https://pkg.pr.new/@tanstack/vue-store@352

commit: d3eb6e6

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/CODEOWNERS:
- Around line 1-6: Anchor each repository-root CODEOWNERS pattern by adding a
leading slash to the entries for .github, .nx, nx.json, .changeset/config.json,
scripts, and .npmrc, so they match only those root-level paths.
🪄 Autofix

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1e64b917-b3a3-4554-b170-c60b1ac78b36

📥 Commits

Reviewing files that changed from the base of the PR and between 4252ffa and d3eb6e6.

📒 Files selected for processing (1)
  • .github/CODEOWNERS

Comment thread .github/CODEOWNERS
Comment on lines +1 to +6
.github/ @TanStack/tanstack-core
.nx/ @TanStack/tanstack-core
nx.json @TanStack/tanstack-core
.changeset/config.json @TanStack/tanstack-core
scripts/ @TanStack/tanstack-core
.npmrc @TanStack/tanstack-core No newline at end of file

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🎯 Functional Correctness | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🌐 Web query:

GitHub Codeowners unanchored directory pattern matches directories at all levels leading slash root only

💡 Result:

GitHub CODEOWNERS patterns follow most rules used in gitignore files, but their directory matching behavior depends on how they are anchored and whether wildcards are used [1][2][3]. A pattern is anchored to the root of the repository if it starts with a leading slash (/) [3]. Patterns without a leading slash are unanchored and match at any depth in the repository [3][4]. Regarding directory matching: 1. Unanchored directory patterns: A pattern like dir/ (without a leading slash) matches a directory named dir at any level in the repository hierarchy [3][4]. 2. The * wildcard limit: A pattern using a single asterisk, such as docs/*, matches files directly within the specified directory but does not recursively match files in nested subdirectories [1][5]. This is consistent with how gitignore handles single-level globbing [6]. 3. Recursive matching: To match all files and subdirectories within a directory at any depth, you must use the double asterisk syntax (e.g., docs/) [6][3][5]. In summary, an unanchored pattern does not restrict matching to the root; it matches anywhere in the repository [3]. However, simply naming a directory followed by /* will not provide the recursive matching behavior that users often expect for directory trees; for that, / is required [1][6][3][5].

Citations:


Anchor repository-root paths.

If these rules target only root-level configuration and tooling, add / before each rooted path. Unanchored directory patterns match the same directory name anywhere in the repository.

Proposed fix
-.github/ `@TanStack/tanstack-core`
-.nx/ `@TanStack/tanstack-core`
-nx.json `@TanStack/tanstack-core`
-.changeset/config.json `@TanStack/tanstack-core`
-scripts/ `@TanStack/tanstack-core`
-.npmrc `@TanStack/tanstack-core`
+/.github/ `@TanStack/tanstack-core`
+/.nx/ `@TanStack/tanstack-core`
+/nx.json `@TanStack/tanstack-core`
+/.changeset/config.json `@TanStack/tanstack-core`
+/.npmrc `@TanStack/tanstack-core`
+/scripts/ `@TanStack/tanstack-core`
/.changeset/config.json `@TanStack/tanstack-core`
/.npmrc `@TanStack/tanstack-core`
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In @.github/CODEOWNERS around lines 1 - 6, Anchor each repository-root
CODEOWNERS pattern by adding a leading slash to the entries for .github, .nx,
nx.json, .changeset/config.json, scripts, and .npmrc, so they match only those
root-level paths.

@crutchcorn
crutchcorn merged commit 0ec4a80 into main Aug 9, 2026
9 checks passed
@crutchcorn
crutchcorn deleted the codeowners branch August 9, 2026 01:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants