[Copilot]

Description

run-doctools was failing before doctools ran because the workflow checked out github.head_ref, which breaks on reruns once the PR branch name is no longer resolvable on origin. This change makes the job execute against the PR source repository at the immutable head SHA and keeps the data regeneration push path safe.

Changes

• Checkout source revision

  • switch checkout to the PR source repo:
    • ${{ github.event.pull_request.head.repo.full_name }}
  • check out the immutable PR head commit:
    • ${{ github.event.pull_request.head.sha }}

• Pin workflow dependency

  • replace actions/checkout@v7 with the current v7 commit SHA to avoid tag drift

• Make auto-push resilient

  • push from detached HEAD explicitly to the PR branch:
    • git push origin HEAD:${{ github.head_ref }}
  • skip the commit/push step if the PR branch no longer exists remotely

Example

- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
  with:
    repository: ${{ github.event.pull_request.head.repo.full_name }}
    ref: ${{ github.event.pull_request.head.sha }}
    fetch-depth: 0