ci: remove pull_request_target workflow

[jdx]

Summary

• Deletes the only workflow in this repo triggered by pull_request_target.
• pull_request_target runs in the context of the base repo (with secrets / write tokens) on PRs from forks, which is risky. The workflow only validated PR titles; not worth the trust footprint.

Test plan

• None — workflow file removal only.

---

Note

Low Risk
Low risk: this only deletes a CI workflow, with the main impact being loss of automated PR title linting.

Overview
Removes the semantic-pr.yml GitHub Actions workflow that validated PR titles via amannn/action-semantic-pull-request and was triggered on pull_request_target events.

^{Reviewed by Cursor Bugbot for commit 35d8a7e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[gemini-code-assist]

Note

Gemini is unable to generate a review for this pull request due to the file types involved not being currently supported.

[greptile-apps]

Greptile Summary

This PR removes the sole pull_request_target-triggered workflow, which was responsible for linting PR titles against conventional-commit rules. The author's rationale is sound: pull_request_target executes in the base-repo context and has access to repository secrets, making it a higher-risk trigger for a low-value lint check.

• Deletes .github/workflows/semantic-pr.yml, which used amannn/action-semantic-pull-request to enforce semantic PR titles — the only effect is that PR title linting will no longer run.
• The removed workflow did have permissions: pull-requests: read and was pinned to a commit SHA, so the actual attack surface was small, but removing it entirely eliminates the risk class.

Confidence Score: 5/5

Safe to merge — this is a pure file deletion with no logic changes and a clear security motivation.

The change deletes a single workflow file with no downstream dependencies. Removing the pull_request_target trigger tightens the repo's CI security posture without breaking any builds or tests.

No files require special attention.

Important Files Changed

Filename	Overview
.github/workflows/semantic-pr.yml	Deleted the pull_request_target workflow that validated PR titles via amannn/action-semantic-pull-request; removes a security-sensitive trigger that ran in the base-repo context with write tokens on fork PRs.

_{Reviews (1): Last reviewed commit: "ci: remove pull_request_target workflow" | Re-trigger Greptile}