Update workflow to use github.token and pull_request_target

Author: mattstratton

.github/workflows/no-sponsors-changes.yml

@@ -1,7 +1,7 @@
 name: Block sponsor asset changes
 
 on:
-  pull_request:
+  pull_request_target:
     types: [opened, synchronize, reopened, ready_for_review]
 
 permissions:
@@ -17,15 +17,12 @@ jobs:
         id: changes
         uses: dorny/paths-filter@v3
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ github.token }}
           list-files: json
           filters: |
             sponsors:
               - 'static/img/sponsors/**'
 
-      # This step will:
-      # 1) Add a single comment (once per PR) listing the files
-      # 2) Fail the check whenever changes are detected (even if comment already exists)
       - name: Comment and fail if sponsors directory changed
         if: steps.changes.outputs.sponsors == 'true'
         uses: actions/github-script@v7
@@ -39,7 +36,6 @@ jobs:
 
             const marker = "<!-- sponsors-dir-guard -->";
 
-            // Parse the changed files list from dorny/paths-filter output
             let files = [];
             try {
               files = JSON.parse(process.env.SPONSORS_FILES_JSON || "[]");
@@ -51,7 +47,6 @@ jobs:
               ? files.map(f => `- \`${f}\``).join("\n")
               : "- _(Unable to enumerate files, but changes were detected)_";
 
-            // Check if we already commented
             const comments = await github.paginate(github.rest.issues.listComments, {
               owner,
               repo,
@@ -69,7 +64,7 @@ jobs:
                 "",
                 "**These files should not be added or changed.**",
                 "",
-                "Please use the `assets/sponsors/*` directory instead."
+                "Please use the `assets/sponsors/*` directory instead.",
                 "",
                 "**Affected files:**",
                 fileList,
@@ -87,5 +82,4 @@ jobs:
               core.info("Sponsor directory warning comment already exists; skipping comment creation.");
             }
 
-            // Always fail the check if files in this directory were touched
             core.setFailed("Changes detected under static/img/sponsors/. Revert these changes to pass.");