ci: remove edited type trigger from enforce-release-source

[trueberryless]

🧭 Context

CI on main is (seemingly randomly) failing because the enforce-release-source action gets cancelled. This PR aims to fix this issue.

📚 Description

To my understanding, the problem is cause because merge queues quickly add commits to main, which causes two things:

1. the commit from main lands in the automatically generated next release PR, which causes the enforce-release-source action to trigger because of the synchronize type
2. the release-pr workflow updates the PR description, which causes the enforce-release-source action to trigger a second time within a short time frame because of the edited type

This results in two workflow runs getting triggered and one getting cancelled because both events trigger quickly after each other. Therefore, removing the edited type should resolve the issue, as it removes one of the concurrent runs. Since an edit of the PR description does not include target branch changes, removing the edited type would be my solution. I also explicitly set cancel-in-progress to false to avoid future confusion.

So I think this cancellation happens seemingly random because workflows just do not take the same time always, resulting in the cancellation sometimes happening because of timing reasons, and sometimes not.

This is just how I understood it after debugging for the last 2 hours. I would really appreciate another four eyes on my deduction.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ready	Preview, Comment	Jul 6, 2026 6:19pm
npmx.dev	Ready	Preview, Comment	Jul 6, 2026 6:19pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
npmx-lunaria	Ignored		Jul 6, 2026 6:19pm

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 9c0829b1-12e8-444d-84ee-ab9a5932b931

📥 Commits

Reviewing files that changed from the base of the PR and between 437c401 and 37e9bdb.

📒 Files selected for processing (1)

• .github/workflows/enforce-release-source.yml

✅ Files skipped from review due to trivial changes (1)

• .github/workflows/enforce-release-source.yml

---

📝 Walkthrough

Walkthrough

This PR updates the enforce-release-source workflow to listen for pull_request_targetsynchronize events instead of edited, and adds cancel-in-progress: false to the workflow’s concurrency configuration.

Changes

Workflow configuration updates

Layer / File(s)	Summary
Trigger event types .github/workflows/enforce-release-source.yml	Replaced pull_request_target.types entry edited with synchronize.
Concurrency configuration .github/workflows/enforce-release-source.yml	Added cancel-in-progress: false beneath the existing concurrency.group setting.

Suggested reviewers:ghostdevv

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description check	✅ Passed	The description clearly discusses the workflow trigger and concurrency changes in the pull request.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ All tests successful. No failed tests found.

📢 Thoughts on this report? Let us know!

[trueberryless]

Well, that was unexpected: https://github.com/npmx-dev/npmx.dev/actions/runs/27443844535/job/81124080867#step:3:1

🤣

[ghostdevv]

How confident are you with this? @trueberryless

[trueberryless]

How confident are you with this? @trueberryless

70% because it has been some time since I investigated this. Back then probably 90% 😅

[ghostdevv]

How confident are you with this? @trueberryless

70% because it has been some time since I investigated this. Back the probably 90% 😅

Do you think we should still merge this? Or should we give it some more time to figure it out?

[trueberryless]

Do you think we should still merge this? Or should we give it some more time to figure it out?

I'll revisit my ideas and will let you know 👍

[alexdln]

Looks like now we can let it check and then change the branch right before merging (and without the "edited" trigger, this check will not restart)...

[ghostdevv]

Looks like now we can let it check and then change the branch right before merging (and without the "edited" trigger, this check will not restart)...

wdym?

[alexdln]

The edited trigger allows the workflow to restart whenever a change occurs - whether to the name, description, or base branch.
If we remove it - the workflow may not restart automatically after the base branch changes (and remain in the "passed" state, making this check bypassable)

[trueberryless]

The edited trigger allows the workflow to restart whenever a change occurs - whether to the name, description, or base branch. If we remove it - the workflow may not restart automatically after the base branch changes (and remain in the "passed" state, making this check bypassable)

Okay, but do we need the synchronise type then? Because a new commit can't change the base branch 🤔

[alexdln]

Okay, but do we need the synchronise type then? Because a new commit can't change the base branch

It seems like yes, it can be removed 🤔