From fbcb357ae4e250b164174b35d4ca80e43aa56776 Mon Sep 17 00:00:00 2001 From: Juexin Wang Date: Mon, 17 Aug 2026 16:33:01 -0700 Subject: [PATCH] fix(ci): restore pull_request_target for mirror-changelog (fork Renovate PRs need a write token) --- .github/workflows/mirror-changelog.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/mirror-changelog.yml b/.github/workflows/mirror-changelog.yml index 3df81b9..58e457e 100644 --- a/.github/workflows/mirror-changelog.yml +++ b/.github/workflows/mirror-changelog.yml @@ -15,7 +15,8 @@ name: Mirror Toolbox Changelog on: - pull_request: + # Fork Renovate PRs need a write token; safe (no PR-code checkout, API-only). + pull_request_target: # zizmor: ignore[dangerous-triggers] types: [opened, edited] jobs: