To avoid requiring authorization to run the PR block action for new contributors, use `pull_request_target`. Running the workflow file from the destination branch does not require approval. - https://stackoverflow.com/questions/74957218/what-is-the-difference-between-pull-request-and-pull-request-target-event-in-git
* block pull requests to `stable` Pull requests should be opened against the `unstable` branch. See https://nimbus.guide/contribute.html#build-and-deploy * avoid deleting branch to mimic manual close * avoid triggering on dependabot PRs