[ci] patch previews (#100)

.github/workflows/preview.yml

@@ -2,17 +2,18 @@
 name: Deploy PR previews
 
 on:
-  pull_request_target:
+  pull_request:
     types:
       - opened
       - reopened
       - synchronize
       - closed
 
-concurrency: preview-${{ github.ref }}
-
 jobs:
   deploy-preview:
+    concurrency:
+      group: preview-${{ github.ref }}
+      cancel-in-progress: true
     permissions:
       contents: write
       pull-requests: write
@@ -25,6 +26,8 @@ jobs:
       # this has to match docusaurus's baseURL in docusaurus.config.js
       - run: echo "GH_ACTION_DOCUSAURUS_BASE_URL=pr-preview/pr-${{ github.event.number }}" >> "$GITHUB_ENV"
 
+      - name: Echo
+        run: echo preview-${{ github.ref }}
       - name: Install and Build
         if: github.event.action != 'closed' # You might want to skip the build if the PR has been closed
         run: |

.github/workflows/test.yaml

@@ -3,12 +3,14 @@ name: Test deployment
 on:
   push:
     branches: ["*"]
-  pull_request:
-    types:
-      - opened
-      - synchronize
-    branches:
-      - "main**"
+  # note: not testing on PR, since we are already previews for PRs
+  # which have the same effect
+  # pull_request:
+  #   types:
+  #     - opened
+  #     - synchronize
+  #   branches:
+  #     - "main**"
 
 jobs:
   test-deploy: