Merge branch 'master' into feature/add-api-key-ui-plugin

# Conflicts:
#	.github/workflows/validate-plugin-toml.yml

Author: wu-clan

.github/workflows/validate-plugin-toml.yml

@@ -1,7 +1,7 @@
 name: Validate Plugin TOML
 
 on:
-  pull_request:
+  pull_request_target:
     branches:
       - master
     paths:
@@ -10,7 +10,6 @@ on:
 permissions:
   contents: read
   issues: write
-  pull-requests: write
 
 jobs:
   validate:
@@ -22,11 +21,12 @@ jobs:
         with:
           submodules: recursive
           fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Get changed plugins
         id: changed
         run: |
-          CHANGED_PLUGINS=$(git diff --name-only origin/${{ github.base_ref }}...HEAD | grep '^plugins/' | cut -d'/' -f2 | sort -u | tr '\n' ' ')
+          CHANGED_PLUGINS=$(git diff --name-only origin/${{ github.base_ref }}...${{ github.event.pull_request.head.sha }} | grep '^plugins/' | cut -d'/' -f2 | sort -u | tr '\n' ' ')
           echo "plugins=$CHANGED_PLUGINS" >> $GITHUB_OUTPUT
           echo "Changed plugins: $CHANGED_PLUGINS"
 
@@ -55,8 +55,6 @@ jobs:
         run: |
           pnpm validate ${{ steps.changed.outputs.plugins }}
           echo "result=success" >> $GITHUB_OUTPUT
-        # If validation fails (exit 1), continue-on-error keeps the workflow running
-        # but 'result=success' won't be written to GITHUB_OUTPUT
 
       - name: Post validation comment
         if: always() && steps.changed.outputs.plugins != ''