ci: don't use pull_request_target (#3929)

Author: lidavidm

.github/workflows/dev.yml

@@ -18,7 +18,13 @@
 name: Dev
 
 on:
-  pull_request: {}
+  pull_request:
+    types:
+      - opened
+      - edited
+      - reopened
+      - synchronize
+      - ready_for_review
   push:
     branches-ignore:
       - 'dependabot/**'
@@ -36,15 +42,41 @@ defaults:
     shell: bash
 
 jobs:
+  check-pr:
+    name: "check PR"
+    if: github.event_name == 'pull_request'
+    runs-on: ubuntu-slim
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 1
+          persist-credentials: false
+      # Pings make it into the commit message where they annoy the user every
+      # time the commit gets pushed somewhere
+      - name: Check PR body for pings
+        # Don't check this if it's dependabot - dependabot doesn't ping users
+        # and it tends to include things that look like pings (but are
+        # escaped)
+        if: github.actor != 'dependabot[bot]'
+        env:
+          PR_BODY: ${{ github.event.pull_request.body }}
+        run: |
+          python .github/workflows/dev_pr/body_check.py "$PR_BODY"
+
+      - name: Check PR title for conventional commit format
+        env:
+          PR_TITLE: ${{ github.event.pull_request.title }}
+        run: |
+          python dev/adbc_dev/title_check.py $(pwd) "$PR_TITLE"
+
   pre-commit:
     name: "pre-commit"
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
         with:
-          fetch-depth: 0
+          fetch-depth: 1
           persist-credentials: false
-
       - name: Get required Go version
         run: |
           (. .env && echo "GO_VERSION=${GO}") >> $GITHUB_ENV