Obeya tells from a pull request's address whether to talk to GitHub or to a Forgejo/Gitea server. The host it checks is now always the host it connects to, so a crafted old address can no longer pass for github.com and send a token elsewhere. GitHub Enterprise Cloud (*.ghe.com) now counts as GitHub, and gh always gets an address it accepts. If a Forgejo call fails on a server that might be GitHub Enterprise, the error now says how to log gh in there.
Pull requests go to the right forge, safely
Shared by Daniel Sadilek on October 30, 2026