ci: check dependabot prs originate from repo (#151)

Author: Fdawgs

.github/workflows/ci.yml

@@ -135,6 +135,7 @@ jobs:
     name: Automerge Dependabot PRs
     if: >
         github.event_name == 'pull_request' &&
+        github.event.pull_request.head.repo.full_name == github.repository &&
         github.event.pull_request.user.login == 'dependabot[bot]'
     needs: [browsers, lint, test, typescript]
     permissions: