allow ci to run on all branches, not just main

[atravitz]

Checklist

• Added a news entry

Developers certificate of origin

• I certify that this contribution is covered by the MIT License here and the Developer Certificate of Origin at https://developercertificate.org/.

[atravitz]

this seems practical

[atravitz]

also I updated this to be more strict ( it was "Require approval for first-time contributors" before):

and then we can use: https://docs.github.com/en/actions/how-tos/manage-workflow-runs/approve-runs-from-forks

[mikemhenry]

That's fine, I figured a trust on first use model (like the one we use for ssh) was okay, but I don't think we can be too careful. It does mean we can be quicker to let someone merge in a one line typo change since it then doesn't get them into the "run without approval" list

[github-actions]

No API break detected ✅

[atravitz]

@mikemhenry please take a look after this is merged.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.89%. Comparing base (a7c68fd) to head (2f40a2f).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1649      +/-   ##
==========================================
- Coverage   95.34%   92.89%   -2.45%     
==========================================
  Files         183      183              
  Lines       15779    15779              
==========================================
- Hits        15044    14658     -386     
- Misses        735     1121     +386     

Flag	Coverage Δ
fast-tests	92.89% <ø> (?)
slow-tests	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[mikemhenry]

LGTM!