diff --git a/.github/workflows/agentic-auto-upgrade.yml b/.github/workflows/agentic-auto-upgrade.yml
index fe5b068f2f3..092498db4fc 100644
--- a/.github/workflows/agentic-auto-upgrade.yml
+++ b/.github/workflows/agentic-auto-upgrade.yml
@@ -34,7 +34,7 @@ name: Agentic Auto-Upgrade
 
 on:
   schedule:
-    - cron: "11 4 * * 6"  # Weekly (auto-upgrade)
+    - cron: "21 3 * * 5"  # Weekly (auto-upgrade)
   workflow_dispatch:
 
 permissions:
diff --git a/.github/workflows/content-moderation.yml b/.github/workflows/content-moderation.yml
index 7b0a1c46cb2..cf34cec02a3 100644
--- a/.github/workflows/content-moderation.yml
+++ b/.github/workflows/content-moderation.yml
@@ -3,7 +3,7 @@ name: Content Moderation
 on:
   issues:
     types: [opened]
-  pull_request:
+  pull_request_target:
     types: [opened]
   issue_comment:
     types: [created]
@@ -32,7 +32,7 @@ jobs:
             if (context.eventName === 'issues') {
               user = context.payload.issue.user.login;
               number = context.payload.issue.number;
-            } else if (context.eventName === 'pull_request') {
+            } else if (context.eventName === 'pull_request' || context.eventName === 'pull_request_target') {
               user = context.payload.pull_request.user.login;
               number = context.payload.pull_request.number;
             } else if (context.eventName === 'issue_comment') {
@@ -78,7 +78,7 @@ jobs:
                 state: 'closed',
                 state_reason: 'not_planned'
               });
-            } else if (context.eventName === 'pull_request') {
+            } else if (context.eventName === 'pull_request' || context.eventName === 'pull_request_target') {
               core.info(`Closing PR #${number}`);
               await github.rest.pulls.update({
                 owner: context.repo.owner,