Attach dev label only to PRs not done by dependabot.

.github/workflows/pr-target.yml

@@ -5,22 +5,17 @@ on:
 jobs:
   # label with "dev" to enable PR filtering
   label:
-    permissions:
-      contents: read
-      pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - id: label-the-PR
-        uses: actions/labeler@v4
+      - name: Get PR labels
+        id: pr-labels
+        uses: joerick/pr-labels-action@v1.0.9
+      - name: add label
+        id: add-labels
+        if: !contains(steps.pr-labels.outputs.labels, 'dependabot')
+        uses: actions-ecosystem/action-add-labels@v1
         with:
-          repo-token: "${{ secrets.RELEASER_PAT }}"
-      - id: add-comment
-        if: contains(steps.label-the-PR.outputs.all-labels, 'dev') && !contains(steps.label-the-PR.outputs.all-labels, 'github_actions')
-        run: gh pr comment $PR --body "PR created by $USER"
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          PR: ${{ github.event.pull_request.number }}
-          USER: ${{ github.event.pull_request.user.login }}
+          labels: dev
 
   # automerge successful dependabot PRs
   dependabot: