fix(ci): Run auto-fix from the correct branch

[AaronDewes]

By default, pull_request_target checks out the main branch of vuejs/language-tools and runs the auto fix there. This is very likely not what you wanted to achive.

Also, the permissions pull_request_target has are very broad and can be dangerous.

[pkg-pr-new]

Open in StackBlitz

vue-component-meta

npm i https://pkg.pr.new/vuejs/language-tools/vue-component-meta@5309

vue-component-type-helpers

npm i https://pkg.pr.new/vuejs/language-tools/vue-component-type-helpers@5309

@vue/language-plugin-pug

npm i https://pkg.pr.new/vuejs/language-tools/@vue/language-plugin-pug@5309

@vue/language-server

npm i https://pkg.pr.new/vuejs/language-tools/@vue/language-server@5309

@vue/language-core

npm i https://pkg.pr.new/vuejs/language-tools/@vue/language-core@5309

@vue/language-service

npm i https://pkg.pr.new/vuejs/language-tools/@vue/language-service@5309

vue-tsc

npm i https://pkg.pr.new/vuejs/language-tools/vue-tsc@5309

@vue/typescript-plugin

npm i https://pkg.pr.new/vuejs/language-tools/@vue/typescript-plugin@5309

commit: b6c1725

[AaronDewes]

As you can see from this PR,

the job running on pull_request_target did not pick up anything. Meanwhile, the new job should up the "mistake" and fix it (it's still queued right now)

---

Hmm, it still does not work 🤔 But the original one did not seem to work either.

[KazariEX]

I am also confused about its behavior🧐

[KazariEX]

It seems that pull_request only applies to PR from the branch of the repository itself?