DanielLeens commented on issue #12724:
URL: https://github.com/apache/seatunnel/issues/12724#issuecomment-6108868902
Classification: E / CI workflow migration and privileged pull-request
automation.
The migration is required: current `dev` still uses `pull_request_target` in
both affected workflows, and ASF Infra states that trigger will be disabled
from November 2026. #12725 follows the recommended small `pull_request` signal
plus default-branch `workflow_run` shape. Its use of a default-branch checkout
with persisted credentials disabled, top-level `permissions: {}`, API-based PR
resolution, and no pull-request checkout is aligned with the policy.
`actions/labeler@v5` also documents the `pr-number` input used by the new
workflow.
Please keep #12725 as the one implementation, but do not mark it ready yet.
It is draft and the Build is queued. Before review, provide observable evidence
for a same-repository PR and a fork PR: expected path labels are applied only
to the matching head SHA, exactly one Build check links to the actual fork run,
and an unapproved external-contributor signal cannot execute or check out
pull-request code. Preserve the old opened, reopened, and synchronize behavior
unless an intentionally broadened event contract is documented.
No source or dependency change is involved, and the issue is not resolved in
dev.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
