{"ok":true,"trend":{"id":41318,"platform":"mastodon","region":"global","key":"github is changing how pull_request_target works this year. two dated changes affect every public... # github # security","title":"GitHub is changing how pull_request_target works this year. Two dated changes affect every public... # github # security","url":"https://www.urbanmind.net/display/f7dd981d-42de0cf0-edbf7b4b007e579c","first_seen":"2026-09-27T00:08:37.068653Z","last_seen":"2026-09-27T00:08:37.068653Z","last_rank":6,"peak_rank":6,"last_volume":3,"peak_volume":3,"seen_count":1,"score":63.27,"category_hint":"software","section":"technology","category":"software","summary":"GitHub has announced two dated changes to how the pull_request_target trigger works, affecting every public repository that uses it in CI workflows. The change is aimed at tightening security around workflows that run with access to repository secrets while checking untrusted pull request code. Developers of popular open source projects are assessing which automations may break, with reports suggesting roughly a thousand workflows could be impacted.","why":"Open source maintainers need to update widely used CI workflows before the changes take effect, raising concerns about breakage and security.","tone":"neutral","entities":["GitHub","pull_request_target","open source developers"],"summarized_at":"2026-09-27T00:09:44.194664Z","meta":{"tag":"opensource","via":"scan","kind":"status","lang":"en","generic":0.1,"instance":"mastodon.social","tag_uses":389},"nw":0.47,"promo":0.03,"kind":"news_event","importance":1.82,"hidden":false,"hide_reason":null,"judged_at":"2026-09-27T00:08:37.561102Z","title_en":"GitHub to change pull_request_target workflow behavior this year","section_name":"Technology","category_name":"Software","timeline":[{"captured_at":"2026-09-27T00:08:37.068653Z","rank":6,"volume":3}],"posts":[{"platform":"mastodon","url":"https://www.urbanmind.net/display/f7dd981d-42de0cf0-edbf7b4b007e579c","author":"hackaday@www.urbanmind.net","title":null,"snippet":"GitHub is changing how pull_request_target works this year. Two dated changes affect every public... # github # security # devops # opensource # software # coding # development # engineering # inclusive # community What GitHub's pull_request_target changes break in the 1,000…","posted_at":"2026-09-26T22:53:47Z","likes":3}],"elsewhere":[],"window":"7d"}}