{"type":"post","id":"pull-request-target-blocked-by-default-december-2-fa5b8b","slug":"pull-request-target-blocked-by-default-december-2-fa5b8b","title":"pull_request_target blocked by default December 2","description":"GitHub says Actions will block pull_request_target events by default in public repositories starting December 2, 2026, unless an applicable Actions event policy explicitly allows them.","retrieval_nugget":"GitHub says Actions will block pullrequesttarget events by default in public repositories starting December 2, 2026, unless an applicable Actions event policy explicitly allows them. Teams using this trigger should inspect affected workflows before enforcement: the change aims to reduce the risk of untrusted fork code reaching workflows with access to repository secrets.","published_at":"2026-11-14","updated_at":"2026-11-14","record_date":"2026-11-14","date_kind":"published_at","topics":["github"],"entities":["GitHub","GitHub Actions","pull_request_target"],"related_patterns":[],"novelty_label":"new_fact","what_changed":"GitHub will block pull_request_target by default in public repositories starting December 2, 2026, after moving enforcement from November 2 and scheduling two November brownouts.","prior_refs":["https://newruntime.com/posts/agentic-workflows-v1-2-0-requires-opt-in-df4b46/"],"source_url":"https://github.blog/changelog/2026-11-02-pull_request_target-blocked-by-default-december-2","source_urls":["https://github.blog/changelog/2026-11-02-pull_request_target-blocked-by-default-december-2"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:pull-request-target-blocked-by-default-december-2-fa5b8b","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/pull-request-target-blocked-by-default-december-2-fa5b8b/","markdown":"https://newruntime.com/posts/pull-request-target-blocked-by-default-december-2-fa5b8b.md","json":"https://newruntime.com/posts/pull-request-target-blocked-by-default-december-2-fa5b8b.json"},"markdown_url":"https://newruntime.com/posts/pull-request-target-blocked-by-default-december-2-fa5b8b.md","next_reads":[{"type":"topic","path":"/topics/github/","url":"https://newruntime.com/topics/github/","title":"Github","reason":"Explore the github topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/github.md","json_url":"https://newruntime.com/topics/github.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}