jdx 3b3c8bb538 ci: remove pull_request_target workflow (#469) ... ## Summary - Deletes the only workflow in this repo triggered by `pull_request_target`. - `pull_request_target` runs in the context of the base repo (with secrets / write tokens) on PRs from forks, which is risky. The workflow only validated PR titles; not worth the trust footprint. ## Test plan - [ ] None — workflow file removal only. <!-- CURSOR_SUMMARY --> --- > [!NOTE] > **Low Risk** > Low risk: deletes a GitHub Actions workflow only; no application code or runtime behavior changes, and it reduces exposure from `pull_request_target` workflows. > > **Overview** > Removes the `semantic-pr-lint` GitHub Actions workflow that ran on `pull_request_target` to validate PR titles. > > This eliminates the repo’s only `pull_request_target` workflow, reducing the trust/secrets footprint for PRs (especially from forks). > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 907019cdfa. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup> <!-- /CURSOR_SUMMARY --> Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-12 08:30:22 -05:00
..
linters	feat: support windows (#122)	2024-09-25 21:27:52 +00:00
workflows	ci: remove pull_request_target workflow (#469)	2026-05-12 08:30:22 -05:00
renovate.json	feat: use autofix.ci to auto-update dist/ on all PRs	2025-10-31 09:43:48 -05:00