@next-friday/create-app 5.0.1 → 5.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@next-friday/create-app",
-  "version": "5.0.1",
+  "version": "5.0.2",
   "description": "Create a Next Friday project from a template.",
   "keywords": [
     "create",

package/templates/base/.husky/pre-push

@@ -7,12 +7,11 @@ while read -r local_ref _ remote_ref remote_oid; do
     echo "pre-push: do not push to main. Push your branch and open a pull request." >&2
     exit 1
   fi
-  # A branch this clone pushed before that the remote no longer has was deleted when its pull request merged or closed.
   branch="${remote_ref#refs/heads/}"
   if [ "$branch" != "$remote_ref" ] && [ -z "$(printf '%s' "$remote_oid" | tr -d 0)" ] \
     && { git rev-parse --verify --quiet "refs/remotes/$1/$branch" > /dev/null \
       || [ "$(git config "branch.${local_ref#refs/heads/}.merge" || true)" = "$remote_ref" ]; }; then
-    echo "pre-push: $branch no longer exists on $1, so its pull request merged or closed. Branch from the latest $1/main, push the new branch, and open a new pull request." >&2
+    echo "pre-push: $branch no longer exists on $1. Push the work to a new branch from the latest $1/main and open a pull request. To reuse the name, run git fetch --prune and git branch --unset-upstream first." >&2
     exit 1
   fi
 done

package/templates/base/SETUP.md

@@ -55,6 +55,7 @@ Also replace the owner placeholder in `.github/zizmor.yml`.
 
 - **Actions → General → Workflow permissions:** select **Read repository contents and packages permissions**. Every workflow requests the extra permissions it needs.
 - **General → Pull Requests:** select **Automatically delete head branches**, so a branch is deleted when its pull request merges.
+- **General → Pull Requests → Allow squash merging:** set the default commit message to the pull request title alone ([configure commit squashing](https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/configuring-commit-squashing-for-pull-requests)). Each commit on `main` is then the pull request title and number, with only co-author trailers in the body; the pull request description holds the why.
 - **Advanced Security:** enable private vulnerability reporting, Dependabot alerts, Dependabot security updates, secret scanning, and push protection. `SECURITY.md` sends reporters to private vulnerability reporting.
 - **Rules → Rulesets:** protect `main` with:
   - squash merges only, a linear history, and no force pushes or deletion;