Jefffrey opened a new issue, #26406:
URL: https://github.com/apache/datafusion/issues/26406

   > ### A safer replacement for `pull_request_target`
   >
   > From November 2026, the `pull_request_target` trigger is disabled for ASF 
repositories. Projects still using it should migrate to the pattern below.
   
   - https://infra.apache.org/github-actions-policy.html
   
   See warning here:
   
   >  **Workflow execution policy warning (evaluate mode):** 
.github/workflows/labeler.yml#L1
   > On November 2, 2026, GitHub will restrict `pull_request_target` on public 
repositories by default. To continue allowing the event trigger, configure an 
Actions policy. Learn more: 
https://gh.io/securely-using-pull_request_target#default-policy-for-pull_request_target
   
   - https://github.com/apache/datafusion/actions/runs/38860001802
   
   
https://github.com/apache/datafusion/blob/5009f42e4a24d231580222e5628c1e203f07614b/.github/workflows/labeler.yml#L24-L29
   
   
https://github.com/apache/datafusion/blob/5009f42e4a24d231580222e5628c1e203f07614b/.github/workflows/release_version_labeler.yaml#L27-L32


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to