diff --git a/.github/labeler.yaml b/.github/labeler.yaml
index bd5bdac1..4d0c46b5 100644
--- a/.github/labeler.yaml
+++ b/.github/labeler.yaml
@@ -1,80 +1,67 @@
 ---
 area/github:
-  any:
-    changed-files:
-      any-glob-to-any-file: [".github/**/*"]
+  - changed-files:
+      - any-glob-to-any-file: ".github/**/*"
 
 area/pre-commit:
-  any:
-    changed-files:
-      any-glob-to-any-file: [".pre-commit-config.yaml", ".hooks/**/*"]
+  - changed-files:
+      - any-glob-to-any-file: .pre-commit-config.yaml
+      - any-glob-to-any-file: .hooks/**/*
 
 area/ansible:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["ansible/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "ansible/*.go"
 
 area/cloudflare:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["cloudflare/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "cloudflare/*.go"
 
 area/dev:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["dev/**/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "dev/**/*.go"
 
 area/file:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["file/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "file/*.go"
 
 area/git:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["git/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "git/*.go"
 
 area/keeper:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["keeper/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "keeper/*.go"
 
 area/logging:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["logging/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "logging/*.go"
 
 area/macos:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["macos/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "macos/*.go"
 
 area/net:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["net/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "net/*.go"
 
 area/str:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["str/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "str/*.go"
 
 area/sys:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["sys/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "sys/*.go"
 
 area/web:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["web/*.go", "web/cdpchrome/*.go"]
+  - changed-files:
+      - any-glob-to-any-file: "web/*.go"
+      - any-glob-to-any-file: "web/cdpchrome/*.go"
 
 area/magefiles:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["magefiles/*"]
+  - changed-files:
+      - any-glob-to-any-file: "magefiles/*"
 
 area/go-mod-sum:
-  any:
-    changed-files:
-      any-glob-to-any-file: ["go.mod", "go.sum"]
+  - changed-files:
+      - any-glob-to-any-file: "go.mod"
+      - any-glob-to-any-file: "go.sum"
diff --git a/.github/workflows/meta-labeler.yaml b/.github/workflows/meta-labeler.yaml
index e0f14d5d..f6215da4 100644
--- a/.github/workflows/meta-labeler.yaml
+++ b/.github/workflows/meta-labeler.yaml
@@ -2,19 +2,16 @@
 name: "Meta Labeler"
 on:
   workflow_dispatch:
-  pull_request_target:
-    types: ["opened", "synchronize"]
+  pull_request:
+    branches: ["main"]
 
 jobs:
   labeler:
-    runs-on: ubuntu-latest
     name: Labeler
-    permissions:
-      contents: read
-      pull-requests: write
+    runs-on: ubuntu-latest
     steps:
       - name: Labeler
         uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
         with:
           configuration-path: .github/labeler.yaml
-          repo-token: ${{ secrets.BOT_TOKEN }}
+          repo-token: "${{ secrets.BOT_TOKEN }}"