ci: check dependabot prs originate from repo (#246)

Author: Fdawgs

.github/workflows/ci.yml

@@ -95,6 +95,7 @@ jobs:
     name: Automatically merge Dependabot pull requests
     if: >
         github.event_name == 'pull_request' &&
+        github.event.pull_request.head.repo.full_name == github.repository &&
         github.event.pull_request.user.login == 'dependabot[bot]'
     needs: test
     runs-on: ubuntu-latest