justinmclean opened a new pull request, #4455:
URL: https://github.com/apache/iggy/pull/4455

   ## Which issue does this PR address?
   
   Closes #4449
   
   ## Rationale
   
   ASF Infra bars pull_request_target on workflows that hold a token and 
disables it for ASF repositories from November 2026. Two of our workflows use 
it with a write token.
   
   ## What changed?
   
   PR lifecycle labels, the welcome comment and push-driven stale unmark ran on 
pull_request_target with a write token.
   
   pr-triage-collect.yml now also collects the pull_request lifecycle events 
with its read-only token. pr-triage-apply.yml runs on workflow_run only, checks 
the artifact's action against a fixed list and acts on the PR's live state from 
the API. stale-prs-unmark-on-activity.yml handles synchronize, reopened and 
ready_for_review, and stale-prs-unmark.yml is removed.
   
   ## Local Execution
   
   - Passed: YAML parses, the embedded bash passes bash -n and shellcheck, the 
github-script passes node --check, and the new resolve branches were run 
against fake payloads with a stubbed gh (lifecycle actions resolve, other 
actions skip, a commit outside the PR is rejected). workflow_run only fires 
from the default branch, so the full flow runs only after merge.
   - Pre-commit hooks ran
   
   ## AI Usage
   
   1. Claude (Claude Code).
   2. Read the existing triage workflows, designed the change and wrote it.
   3. The syntax checks and stubbed runs above, and a line-by-line review of 
the diff.
   4. Yes.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to