Run the CI in the correct context

Author: elegaanz

.github/workflows/test_pr.yml

@@ -1,6 +1,6 @@
 name: Test PR
 on:
-  pull_request: {}
+  pull_request_target: {}
 
 jobs:
   test:
@@ -19,11 +19,14 @@ jobs:
             });
 
             const packages = new Set();
+            let bundlerChanges = false;
             files.forEach(file => {
               const match = file.filename.match(/^packages\/preview\/([^\/]+)\/([^\/]+)\//);
               if (match) {
                 packages.add({ namespace: "preview", name: match[1], version: match[2] });
               }
+
+              bundlerChanges = bundlerChanges || file.filename.startsWith("bundler/");
             });
 
             let sparseCheckoutPaths;
@@ -33,7 +36,10 @@ jobs:
               sparseCheckoutPaths = Array.from(packages).map((pkg) => `packages/preview/${pkg.name}/${pkg.version}/`).join('\n');
             }
             core.setOutput('sparse-checkout-paths', sparseCheckoutPaths);
-
+            core.setOutput('bundler-changes', bundlerChanges);
+      - name: Require approval for bundler changes
+        if: ${{ steps.extract-package.outputs.bundler-changes && ! contains(github.event.pull_request.labels.*.name, 'safe-bundler-changes') }}
+        run: echo "The changes made to the bundler needs to be approved first." && false
       - uses: actions/checkout@v4
         with:
           sparse-checkout: |