[build] make proper use of pull_request_target for auto labeling and commenting

Author: titusfortner

.github/workflows/label-commenter.yml

@@ -4,7 +4,7 @@ name: Label Commenter
 on:
   issues:
     types: [ labeled ]
-  pull_request:
+  pull_request_target:
     types: [labeled]
 
 permissions:
@@ -16,11 +16,15 @@ jobs:
     if: github.repository_owner == 'seleniumhq'
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout repo to get config file
+      - name: Checkout base repo to get config file
         uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.base.ref }}
+          repository: seleniumhq/selenium
       - name: Label Commenter
         uses: peaceiris/actions-label-commenter@v1
         with:
           # The individual PAT is needed so commenter can auto-executes on PRs from Forks
           # It expires 4/1/2026
           github_token: ${{ secrets.LABEL_COMMENTER_PAT }}
+          config_file: .github/label-commenter-config.yml

.github/workflows/pr-labeler.yml

@@ -13,6 +13,11 @@ jobs:
   label:
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout base repo to get config file
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.pull_request.base.ref }}
+          repository: seleniumhq/selenium
       - name: Auto label Pull Requests
         uses: actions/labeler@v5
         with: