chore: switch to two-phase workflow

.github/workflows/diff-dependencies-comment.yml

@@ -0,0 +1,27 @@
+name: Dependency Diff (Comment)
+
+on:
+  workflow_run:
+    workflows: ['Dependency Diff (Analyze)']
+    types:
+      - completed
+
+jobs:
+  post_comment:
+    runs-on: ubuntu-latest
+    if: github.event.workflow_run.conclusion == 'success'
+    permissions:
+      pull-requests: write
+      actions: read
+    steps:
+      - name: Download Artifact
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: e18e-diff-result
+          run-id: ${{ github.event.workflow_run.id }}
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+      - name: Post Comment
+        uses: e18e/action-dependency-diff@27a5e97505c6a13fbe1eece3388bd16e58888548 # pre-release
+        with:
+          mode: comment-from-artifact
+          artifact-path: e18e-diff-result.json

.github/workflows/diff-dependencies.yml

@@ -1,7 +1,7 @@
-name: Dependency Diff
+name: Dependency Diff (Analyze)
 
 on:
-  pull_request_target:
+  pull_request:
     branches:
       - main
 
@@ -56,13 +56,12 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build-main, build-pr]
     permissions:
-      pull-requests: write
+      contents: read
     steps:
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
-          ref: ${{ github.event.pull_request.head.sha }}
       - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: base-packages
@@ -71,8 +70,15 @@ jobs:
         with:
           name: source-packages
           path: ./source-packages
-      - name: Create Diff
-        uses: e18e/action-dependency-diff@d995338f3b229fe7b2cd82048df5da930f70c7c3 # v1.4.4
+      - name: Analyze Dependencies
+        id: analyze
+        uses: e18e/action-dependency-diff@27a5e97505c6a13fbe1eece3388bd16e58888548 # pre-release
         with:
+          mode: artifact
           base-packages: ./base-packages/*.tgz
           source-packages: ./source-packages/*.tgz
+      - name: Upload Artifact
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        with:
+          name: e18e-diff-result
+          path: ${{ steps.analyze.outputs.artifact-path }}