This is really frustrating.
We relied heavily on deploy hooks, and this change has broken an existing workflow without enough warning. Framing it as “closing enforcement gaps” doesn’t change the fact that this is a meaningful product and pricing change for teams using private repos.
I understand the security rationale, but requiring a Vercel seat for commit authors who may only be involved through Git/webhook-driven deploys is a big shift.
At this point I’m seriously considering alternatives, because this creates real operational issues for us.