Repository navigation
Replace pull_request_target in Pages - #43
Merged
Merged
Conversation
GitHub blocks pull_request_target in public repositories from December 2, 2026. Pages used it to remove or refresh previews when a PR closes, becomes a draft, gets a new commit, changes the benchmarks: skip label, or changes base. A no-op PR Preview Sync workflow now runs on those pull_request events. Pages runs through workflow_run when it succeeds and still executes only main code. Fork runs need approval, so outside PRs can no longer trigger Pages deployments on their own. Signed-off-by: Ludvig Liljenberg <4257730+ludfjig@users.noreply.github.com>
One invalid preview build made the whole Pages run fail. Production stopped deploying until that PR closed. Pages now drops a preview that fails the build checks or exceeds the artifact size limit, logs a warning, and deploys everything else. The warning escapes artifact file names so they cannot inject workflow commands. Signed-off-by: Ludvig Liljenberg <4257730+ludfjig@users.noreply.github.com>
ludfjig
force-pushed
the
preview-sync-workflow-run
branch
from
November 10, 2026 18:27
eeadda8 to
9b33d60
Compare
This branch was previously deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
GitHub blocks
pull_request_targetin public repositories from December 2, 2026. Pages used it to remove or refresh previews after PR events, and it let outside PRs trigger Pages deployments without approval. One invalid preview build also failed the whole Pages run, which blocked production deploys.pull_requestevents. Pages runs throughworkflow_runwhen it succeeds and still runs onlymaincode. Fork runs need approval.workflow_runonly runs frommain, so the new chain can only be tested after merge. The old trigger keeps working until then.