[Nan Liu (liunan-ms)]

Context

On November 2, 2026, GitHub will automatically enforce a default rule blocking pull_request_target workflows for affected public repositories. The default applies to public repositories without an applicable event policy; enforcement covers affected repositories that were using the default pull_request_target policy before general availability.

Under that default, the existing PR-title workflow would stop running unless explicitly allowed by an applicable Actions event policy. Switching to pull_request avoids depending on such an exception and keeps PR-title validation compatible with the new default.

Changes

• Replace pull_request_target with pull_request, retaining the opened, edited, and reopened events.
• Keep workflow-level permissions: {} and reduce the validation job to pull-requests: read.
• Remove the PR-comment creation/deletion steps and their unused step ID. Invalid titles are still reported by the validation check, without posting PR comments.
• Preserve the pinned semantic-title action, concurrency settings, and relevant comments; remove comments specific to the old trigger and commenting steps.

Validation

• git --no-pager diff --check main...HEAD - passed.
• ruby -r yaml -e 'YAML.load_file(".github/workflows/check-pr-title.yml"); puts "YAML syntax OK"' - passed.
• GitHub Actions execution has not been verified. zizmor and actionlint were not run because they are unavailable locally.
• Go build, unit tests, and scenario tests were not run because this change only updates a GitHub Actions workflow.

[Copilot]

🟡 Changes recommended

Missing synchronize events leave pushed revisions without validation and can block merging when the check is required.

1 open issue

• Add synchronize trigger for PR title validation · New

What changed in this PR

Moves PR-title validation to a read-only pull_request workflow, avoiding reliance on pull_request_target exceptions.

Changes:

• Switches triggers and reduces permissions to pull-requests: read.
• Removes PR-comment steps while preserving the pinned validation action and concurrency settings.

File	Description
.github/​workflows/​check-pr-title.yml	Updates the trigger, reduces permissions, and removes commenting.

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

No blocking issues were identified in this narrowly scoped workflow change, though Actions execution remains unverified.

No open issues 🎉

1 resolved since last review

• Add synchronize trigger for PR title validation

_{Review effort: Balanced}

[Copilot]

🟢 Approval recommended

The focused workflow change preserves title validation with read-only permissions, and no unresolved blocking issues remain.

No open issues 🎉

_{Review effort: Balanced}