fix(ci): use pull_request_target trigger to grant write access on fork PRs

[sripasg]

Summary

This PR updates the event trigger of the newly introduced PR Size Labeler workflow from pull_request to pull_request_target. This resolves a permission bottleneck where workflows triggered by pull requests originating from forks (or restricted contexts) fail with GraphQL: Resource not accessible by integration (addLabelsToLabelable) due to default read-only token limitations.

Details

• Grants Write Privileges securely: Changing the trigger to pull_request_target executes the workflow in the context of the trusted base branch (main), allowing GitHub to grant the elevated write permissions declared in the permissions: block (pull-requests: write and issues: write).
• Safe, Zero-Checkout Architecture: Using pull_request_target is traditionally a security concern only if untrusted code from the PR is checked out and executed (e.g., running build scripts). Because this workflow has no actions/checkout step and communicates exclusively with the GitHub API via the gh CLI, it is 100% safe and immune to code-injection vulnerabilities.
• Identical Payload Structure: The internal bash script remains completely unchanged as the github.event.pull_request payload structure is identical under both pull_request and pull_request_target events.
• Enables fork-PR automation: Successfully enables automated size labeling and comment synchronization for pull requests sent by external contributors and forks, ensuring a consistent triage experience across all contributions.

Related Issues

How to Validate

Pre-Merge Checklist

• [NA] Updated relevant documentation and README (if needed)
• [NA] Added/updated tests (if needed)
• [NA] Noted breaking changes (if any)
• [NA] Validated on required platforms/methods:
  • [NA] MacOS
    • npm run
    • npx
    • Docker
    • Podman
    • Seatbelt
  • Windows
    • npm run
    • npx
    • Docker
  • Linux
    • npm run
    • npx
    • Docker

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[github-actions]

Size Change: -4 B (0%)

Total Size: 33.9 MB

Filename	Size	Change
./bundle/chunk-D5PLCMXF.js	0 B	-3.43 kB (removed)	🏆
./bundle/chunk-F6MOIYQO.js	0 B	-2.79 MB (removed)	🏆
./bundle/chunk-KWLI6PHA.js	0 B	-661 kB (removed)	🏆
./bundle/chunk-L3HM4MFV.js	0 B	-49.2 kB (removed)	🏆
./bundle/chunk-PAQ22HE2.js	0 B	-3.77 kB (removed)	🏆
./bundle/chunk-QKY7SEAG.js	0 B	-13 kB (removed)	🏆
./bundle/chunk-U6H2GMPE.js	0 B	-19.5 kB (removed)	🏆
./bundle/chunk-VM7IYHWM.js	0 B	-16.4 MB (removed)	🏆
./bundle/core-LQMKQUM2.js	0 B	-49.6 kB (removed)	🏆
./bundle/devtoolsService-JOLMUVQ7.js	0 B	-28 kB (removed)	🏆
./bundle/gemini-B2DXTP7G.js	0 B	-589 kB (removed)	🏆
./bundle/interactiveCli-YJJT626Y.js	0 B	-1.3 MB (removed)	🏆
./bundle/liteRtServerManager-4KQA533I.js	0 B	-2.08 kB (removed)	🏆
./bundle/oauth2-provider-KUHMDZQU.js	0 B	-9.12 kB (removed)	🏆
./bundle/chunk-2BTVRC2L.js	16.4 MB	+16.4 MB (new file)	🆕
./bundle/chunk-6BC36HGY.js	13 kB	+13 kB (new file)	🆕
./bundle/chunk-GTG3GMQ3.js	19.5 kB	+19.5 kB (new file)	🆕
./bundle/chunk-MMHP2IVC.js	661 kB	+661 kB (new file)	🆕
./bundle/chunk-PWB4LJNS.js	49.2 kB	+49.2 kB (new file)	🆕
./bundle/chunk-RLZ2VXFG.js	2.79 MB	+2.79 MB (new file)	🆕
./bundle/chunk-XFDTZESQ.js	3.77 kB	+3.77 kB (new file)	🆕
./bundle/chunk-ZLL5YJK2.js	3.43 kB	+3.43 kB (new file)	🆕
./bundle/core-WK5FAQFI.js	49.6 kB	+49.6 kB (new file)	🆕
./bundle/devtoolsService-NEFJK2YE.js	28 kB	+28 kB (new file)	🆕
./bundle/gemini-QLPCHJ6R.js	589 kB	+589 kB (new file)	🆕
./bundle/interactiveCli-TQPL7KMN.js	1.3 MB	+1.3 MB (new file)	🆕
./bundle/liteRtServerManager-Q7YI262U.js	2.08 kB	+2.08 kB (new file)	🆕
./bundle/oauth2-provider-NK2PYTK4.js	9.12 kB	+9.12 kB (new file)	🆕

ℹ️ View Unchanged

Filename	Size	Change
./bundle/bundled/third_party/index.js	8 MB	0 B
./bundle/chunk-34MYV7JD.js	2.45 kB	0 B
./bundle/chunk-5AUYMPVF.js	858 B	0 B
./bundle/chunk-5PS3AYFU.js	1.18 kB	0 B
./bundle/chunk-6HI7VNOG.js	124 kB	0 B
./bundle/chunk-DAHVX5MI.js	206 kB	0 B
./bundle/chunk-IUUIT4SU.js	56.5 kB	0 B
./bundle/chunk-TUDYL3X4.js	40.3 kB	0 B
./bundle/cleanup-4QHHCUWX.js	0 B	-902 B (removed)	🏆
./bundle/devtools-V7NE4CQA.js	696 kB	0 B
./bundle/events-XB7DADIJ.js	418 B	0 B
./bundle/examples/hooks/scripts/on-start.js	188 B	0 B
./bundle/examples/mcp-server/example.js	1.43 kB	0 B
./bundle/gemini.js	5.38 kB	0 B
./bundle/getMachineId-bsd-TXG52NKR.js	1.55 kB	0 B
./bundle/getMachineId-darwin-7OE4DDZ6.js	1.55 kB	0 B
./bundle/getMachineId-linux-SHIFKOOX.js	1.34 kB	0 B
./bundle/getMachineId-unsupported-5U5DOEYY.js	1.06 kB	0 B
./bundle/getMachineId-win-6KLLGOI4.js	1.72 kB	0 B
./bundle/https-proxy-agent-AVGR4LHR.js	490 B	0 B
./bundle/multipart-parser-KPBZEGQU.js	11.7 kB	0 B
./bundle/sandbox-macos-permissive-open.sb	890 B	0 B
./bundle/sandbox-macos-permissive-proxied.sb	1.31 kB	0 B
./bundle/sandbox-macos-restrictive-open.sb	3.36 kB	0 B
./bundle/sandbox-macos-restrictive-proxied.sb	3.56 kB	0 B
./bundle/sandbox-macos-strict-open.sb	4.82 kB	0 B
./bundle/sandbox-macos-strict-proxied.sb	5.02 kB	0 B
./bundle/src-LG4OHBW7.js	233 kB	0 B
./bundle/src-QVCVGIUX.js	47 kB	0 B
./bundle/start-7GTWUYG6.js	0 B	-622 B (removed)	🏆
./bundle/tree-sitter-7U6MW5PS.js	274 kB	0 B
./bundle/tree-sitter-bash-34ZGLXVX.js	1.84 MB	0 B
./bundle/worker/worker-entry.js	361 kB	0 B
./bundle/cleanup-ARZPQHHT.js	902 B	+902 B (new file)	🆕
./bundle/start-QBIS7DSJ.js	622 B	+622 B (new file)	🆕

_{compressed-size-action}