Your team's CI pipeline occasionally fails, but developers have been merging pull requests into the main branch anyway, breaking the deployment. As a repository admin, which branch protection rule setting should you enable to prevent pull requests from being merged until all CI tests pass?