Your project is not open source if only your company is allowed to merge changes and create a release.

This might be ok initially but if you are not working on a proper delegation model where the responsibility goes around, it's just going to lead to frustration for everyone involved.