diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
index 7dc054e26..0669c9f88 100644
--- a/.github/workflows/gh-pages.yml
+++ b/.github/workflows/gh-pages.yml
@@ -5,7 +5,7 @@ on:
   push:
     branches:
       - main # deploy main. If your branch is `master`, you'll have to replace that throughout this file.
-  pull_request_target: # This will publish a site preview on every pull request, and also run the build command to test if the site is broken.
+  pull_request: # This will publish a site preview on every pull request, and also run the build command to test if the site is broken.
 
 jobs:
   deploy:
@@ -29,7 +29,7 @@ jobs:
         # run: echo "DOMAIN=${{ github.actor }}.github.io" >> $GITHUB_ENV
 
       - name: Checkout website repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           submodules: true # fetch the theme
           # you need to set this as an environment env if your repo or any submodules (e.g the theme) is private:
@@ -39,10 +39,11 @@ jobs:
         run: echo "BASE_URL=https://${{ env.DOMAIN }}/${{ github.event.repository.name }}/" >> $GITHUB_ENV
 
       - name: Setup PDM
-        uses: pdm-project/setup-pdm@v3
+        uses: pdm-project/setup-pdm@c050bdcb2405837648035b6678c75609d53a749f
 
       - name: Build website
         run: |
+          sudo apt update
           sudo apt install -y graphviz doxygen doxygen-latex python3-docutils qtbase5-dev libqt5svg5-dev
           pdm sync -d --no-self
           pdm run meson setup --prefix=/home/runner/work/install -D docs=true -D only-docs=true -D docs-siteurl=$BASE_URL builddir