Leaving my approval to self-merge when it works.

I think, because we run onpull_request_target, we can’t prove it works till after it’s merged.

This event runs in the context of the base of the pull request, rather than in the context of the merge commit, as the pull_request event does. This prevents execution of unsafe code from the head of the pull request that could alter your repository or steal any secrets you use in your workflow.

https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows#pull_request_target

Huh. I tried making this the default branch on my fork and running there, but I still get the same error.
https://github.com/rcomer/matplotlib/actions/runs/18255963223/job/51977245701

I don’t know how to fix this.