diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 984ff6ac3..a7730b720 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,13 +1,10 @@
 name: CI
 
-# Run on pull_request_target to access secrets.GRADLE_ENCRYPTION_KEY,
-# and ensure permissions are marked read-only
-
 on:
   push:
     tags:
       - '*'
-  pull_request_target:
+  pull_request:
   workflow_dispatch:
 
 permissions: read-all
diff --git a/app/src/github/kotlin/app/pachli/di/UpdateCheckModule.kt b/app/src/github/kotlin/app/pachli/di/UpdateCheckModule.kt
index 327d841b2..88aa167f6 100644
--- a/app/src/github/kotlin/app/pachli/di/UpdateCheckModule.kt
+++ b/app/src/github/kotlin/app/pachli/di/UpdateCheckModule.kt
@@ -26,6 +26,7 @@ import dagger.hilt.components.SingletonComponent
 import javax.inject.Singleton
 import okhttp3.OkHttpClient
 import retrofit2.Retrofit
+import retrofit2.converter.moshi.MoshiConverterFactory
 import retrofit2.create
 
 @InstallIn(SingletonComponent::class)