Patrick Buckley ca23f2876c fix(ci): refuse fork PRs in the vendor-js dispatch path ...

The workflow_dispatch input is an arbitrary PR number, and the job used
only headRefName to pick the checkout ref. For a fork PR that is a bare
branch name that can collide with a branch in this repo, so the job
(contents:write, ends in git push) would operate on that unrelated
branch. Resolve isCrossRepository alongside headRefName and fail loudly
unless the PR head lives in this repository.

2026-07-01 21:32:45 -07:00

..

workflows

fix(ci): refuse fork PRs in the vendor-js dispatch path

2026-07-01 21:32:45 -07:00

renovate.json

feat: render rich media embeds for MCP tool results (#292)

2026-04-04 14:47:25 -07:00