From ce0cdc8439d831dd83872a62959fbf6e1c10b578 Mon Sep 17 00:00:00 2001
From: Steve Fulmer <sfulmer@redhat.com>
Date: Fri, 10 Jul 2026 08:56:59 -0400
Subject: [PATCH] fix(ci): use pull_request_target for Slack notifications on
 fork PRs

Fork PRs cannot access repository secrets under pull_request trigger,
causing the Slack webhook to fail with 'Missing input' error. Switch to
pull_request_target which runs in the base repo context with secret
access. Safe because this workflow only sends notifications and does
not checkout or execute PR code.

Also bumps slack-github-action from v2.1.0 to v2.1.1.
---
 .github/workflows/slack-pr-notifications.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/slack-pr-notifications.yml b/.github/workflows/slack-pr-notifications.yml
index d910c67..3521ce4 100644
--- a/.github/workflows/slack-pr-notifications.yml
+++ b/.github/workflows/slack-pr-notifications.yml
@@ -1,7 +1,7 @@
 name: Slack PR Notifications
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, closed, reopened]
     branches: ["main"]
   pull_request_review:
@@ -68,7 +68,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Send Slack notification
-        uses: slackapi/slack-github-action@b0fa283ad8fea605de13dc3f449259339835fc52  # v2.1.0
+        uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a  # v2.1.1
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_URL }}
           webhook-type: incoming-webhook