From e32f2ba8a47963767699b3cf0dd97a48cc9e4377 Mon Sep 17 00:00:00 2001
From: Sanghun Lee <oper6909@gmail.com>
Date: Tue, 3 Mar 2026 19:13:58 +0900
Subject: [PATCH 1/2] ci(BA-4850): separate labeler workflow to fix 403 on fork
 PRs

Extract labeler job from ci.yml into standalone labeler.yml workflow
using pull_request_target trigger. This fixes "Resource not accessible
by integration" errors on fork PRs where GITHUB_TOKEN is read-only.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml      | 10 ----------
 .github/workflows/labeler.yml | 18 ++++++++++++++++++
 2 files changed, 18 insertions(+), 10 deletions(-)
 create mode 100644 .github/workflows/labeler.yml

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 81a106b9db4..b0b060e0456 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -18,16 +18,6 @@ concurrency:
 
 jobs:
 
-  labeler:
-    if: github.event_name == 'pull_request'
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-    steps:
-      - uses: lablup/auto-labeler@main
-
-
   lint-and-typecheck:
     if: |
       !contains(github.event.pull_request.labels.*.name, 'skip:ci')
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
new file mode 100644
index 00000000000..5b445418bf8
--- /dev/null
+++ b/.github/workflows/labeler.yml
@@ -0,0 +1,18 @@
+name: labeler
+
+on:
+  pull_request_target:
+    types: [opened, synchronize, reopened]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  labeler:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      pull-requests: write
+    steps:
+      - uses: lablup/auto-labeler@main

From 46ced3eb86a275b1ddbda4e73238bc5295b0bc8b Mon Sep 17 00:00:00 2001
From: Sanghun Lee <oper6909@gmail.com>
Date: Tue, 3 Mar 2026 19:14:34 +0900
Subject: [PATCH 2/2] changelog: add news fragment for PR #9610

---
 changes/9610.misc.md | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 changes/9610.misc.md

diff --git a/changes/9610.misc.md b/changes/9610.misc.md
new file mode 100644
index 00000000000..534a89ddd38
--- /dev/null
+++ b/changes/9610.misc.md
@@ -0,0 +1 @@
+Separate labeler workflow into standalone file to fix 403 permission errors on fork PRs
\ No newline at end of file