From 11caf917e3d9c1c4f44482964018d9712825d761 Mon Sep 17 00:00:00 2001
From: "Andrei G." <k05h31@gmail.com>
Date: Fri, 20 Mar 2026 00:02:10 +0100
Subject: [PATCH] fix(ci): use pull_request_target for labeler workflow

The labeler workflow used pull_request which lacks write permissions on
fork PRs due to GitHub security restrictions. Switching to
pull_request_target runs the workflow in the base repo context and
grants the GITHUB_TOKEN the pull-requests:write permission needed to
apply labels.
---
 .github/workflows/labeler.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index e227a0e..dc4822c 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -1,7 +1,7 @@
 name: PR Labeler
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, reopened]
 
 permissions: