Merge branch 'trunk' into safari_cookie

Author: Delta456

.github/workflows/label-commenter.yml

@@ -1,10 +1,10 @@
-# Configuration for Label Commenter - https://github.com/peaceiris/actions-label-commenter
+# Configuration for Label Commenter - ./.github/label-commenter-config.yml
 name: Label Commenter
 
 on:
   issues:
     types: [ labeled ]
-  pull_request_target:
+  pull_request:
     types: [labeled]
 
 permissions:
@@ -16,6 +16,11 @@ jobs:
     if: github.repository_owner == 'seleniumhq'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout repo to get config file
+        uses: actions/checkout@v4
       - name: Label Commenter
         uses: peaceiris/actions-label-commenter@v1
+        with:
+          # The individual PAT is needed so commenter can auto-executes on PRs from Forks
+          # It expires 4/1/2026
+          github_token: ${{ secrets.LABEL_COMMENTER_PAT }}

.github/workflows/pr-labeler.yml

@@ -1,7 +1,8 @@
+# Configuration for Label Generation - ./.github/pr-labeler-config.yml
 name: Label pull requests based on file paths
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened]
 
 permissions:
@@ -12,9 +13,10 @@ jobs:
   label:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout repository
-        uses: actions/checkout@v4
-      - uses: actions/labeler@v5
+      - name: Auto label Pull Requests
+        uses: actions/labeler@v5
         with:
-          repo-token: ${{ secrets.GITHUB_TOKEN }}
+          # The individual PAT is needed so labeler auto-executes this workflow
+          # It expires 4/1/2026
+          repo-token: ${{ secrets.PR_LABELER_PAT }}
           configuration-path: .github/pr-labeler-config.yml