Run on pull_request, not target

Author: moradology

.github/labeler.yml

@@ -1,4 +1,3 @@
 needs release notes:
-  - all:
-    - changed-files:
-      - any-glob-to-any-file: 'changes/*.rst'
+- changed-files:
+  - any-glob-to-any-file: 'changes/*.rst'

.github/workflows/needs_release_notes.yml

@@ -1,7 +1,7 @@
 name: "Pull Request Labeler"
 
 on:
-  pull_request_target
+  pull_request
 
 jobs:
   labeler:
@@ -12,6 +12,8 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Run Pull Request Labeler
         uses: actions/[email protected]