diff --git a/.github/workflows/next-changelog.yml b/.github/workflows/next-changelog.yml
index 826710e1..8ec10035 100755
--- a/.github/workflows/next-changelog.yml
+++ b/.github/workflows/next-changelog.yml
@@ -2,8 +2,10 @@
 name: Check for NEXT_CHANGELOG.md Changes
 
 on:
-  # Use pull_request_target to have access to GitHub API
-  pull_request_target:
+  # TEMPORARY (e2e test only): switched from pull_request_target to
+  # pull_request so the workflow fires from the PR branch. Production
+  # deployment requires landing this file on main first.
+  pull_request:
     types: [opened, synchronize, reopened, edited]
 
 jobs:
@@ -11,8 +13,8 @@ jobs:
     # Allow Dependabot PRs to pass without a changelog entry
     if: github.actor != 'dependabot[bot]'
     runs-on:
-      group: databricks-deco-testing-runner-group
-      labels: ubuntu-latest-deco
+      group: databricks-protected-runner-group
+      labels: linux-ubuntu-latest
 
     steps:
       - name: Checkout code
diff --git a/packages/settings/E2E_TEST.md b/packages/settings/E2E_TEST.md
new file mode 100644
index 00000000..3411385c
--- /dev/null
+++ b/packages/settings/E2E_TEST.md
@@ -0,0 +1,5 @@
+# E2E Test Marker
+
+Scratch file used to verify the next-changelog workflow fires on a touched
+package. Safe to delete once the test PR closes.
+