fix(ci): migrate labeler config to actions/labeler v5 schema

.github/labeler.yml

@@ -12,52 +12,68 @@
 
 # Rust Soroban contracts — the canonical on-chain API surface.
 api:
-  - "campaign/**"
-  - "common/**"
-  - "token-bridge/**"
-  - "crates/contracts/core/**"
-  - "crates/contracts/batch-donor/**"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "campaign/**"
+      - "common/**"
+      - "token-bridge/**"
+      - "crates/contracts/core/**"
+      - "crates/contracts/batch-donor/**"
 
 # Native CLI tooling (`cargo run -p orbitchain-tools -- …`).
 cli:
-  - "crates/tools/**"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "crates/tools/**"
 
 # Frontend / mobile-wallet surfaces (Playwright + wallet integration).
 frontend:
-  - "wallet_connect.html"
-  - "wallet_connect.js"
-  - "tests/e2e/**"
-  - "playwright.config.js"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "wallet_connect.html"
+      - "wallet_connect.js"
+      - "tests/e2e/**"
+      - "playwright.config.js"
 
 # CI / build infrastructure.
 ci:
-  - ".github/workflows/**"
-  - ".github/*.md"
-  - ".github/ISSUE_TEMPLATE/**"
-  - ".cargo/**"
-  - "rust-toolchain.toml"
-  - "Cargo.toml"
-  - "Cargo.lock"
+  - changed-files:
+    - any-glob-to-any-file:
+      - ".github/workflows/**"
+      - ".github/*.md"
+      - ".github/ISSUE_TEMPLATE/**"
+      - ".cargo/**"
+      - "rust-toolchain.toml"
+      - "Cargo.toml"
+      - "Cargo.lock"
 
 # Documentation and reference material.
 documentation:
-  - "docs/**"
-  - "**/*.md"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "docs/**"
+      - "**/*.md"
 
 # Persistent / temporary storage backend code paths.
 storage:
-  - "**/storage*.rs"
-  - "**/backend.rs"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "**/storage*.rs"
+      - "**/backend.rs"
 
 # Tests / property-based / fuzz harnesses.
 testing:
-  - "**/tests/**"
-  - "**/*test*.rs"
-  - "**/proptest-strategies/**"
-  - "**/fuzz_targets/**"
-  - "fuzz/**"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "**/tests/**"
+      - "**/*test*.rs"
+      - "**/proptest-strategies/**"
+      - "**/fuzz_targets/**"
+      - "fuzz/**"
 
 # Security process and security-sensitive code.
 security:
-  - "SECURITY.md"
-  - "**/security*.rs"
+  - changed-files:
+    - any-glob-to-any-file:
+      - "SECURITY.md"
+      - "**/security*.rs"

.github/workflows/labeler.yml

@@ -26,6 +26,13 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
+      - uses: actions/checkout@v4
+        with:
+          # Check out the PR head so the labeler reads the config from the
+          # PR branch, not the base branch.  This lets PRs ship their own
+          # labeler config migrations (e.g. v4 -> v5 schema).
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Apply labels
         uses: actions/labeler@v5
         with: