2 Commits

Author	SHA1	Message	Date
Aaron Powell	18654630ab	fix: use pull_request_target trigger for external plugin PR quality gates (#2043) ... The workflow was using the pull_request trigger which restricts GITHUB_TOKEN to read-only for fork PRs, causing the sync-pr-state job to fail with 403 when trying to add labels. Switching to pull_request_target runs the workflow in the base repo context so declared permissions (issues: write, pull-requests: write) are honoured for cross-repository PRs. The workflow is safe to use pull_request_target because: - detect-changed-plugins reads files via the GitHub API only (no checkout) - run-quality-gates checks out the trusted staged branch, not the PR head - sync-pr-state also checks out the staged branch Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>	2026-06-18 10:57:33 +10:00
Aaron Powell	a34c98bfbf	Automate external plugin update PR quality checks (#2005) ... * Add PR quality gates for external plugin updates Automate external plugin update PR review by running skill-validator and install smoke checks against changed entries in plugins/external.json. Sync PR workflow-state labels and upsert a marker-based status comment with source tree links for each changed plugin. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Apply suggestions from code review Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Tighten external plugin PR workflow permissions Scope write permissions to the PR synchronization job, keep the quality-gate job read-only, and handle no-op and detection-failure states explicitly. Also fix source tree link encoding for refs, SHAs, and plugin paths. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> * Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> * Fix external plugin workflow job steps Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com> --------- Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: aaronpowell <434140+aaronpowell@users.noreply.github.com>	2026-06-16 15:40:21 +10:00