Fix OCR reviewing Renovate PRs

Author: thibaudcolas

.github/workflows/ocr-review.yml

@@ -56,8 +56,6 @@ concurrency:
 on: # zizmor: ignore[dangerous-triggers] -- never runs untrusted code, only reads it.
   pull_request_target:
     types: [opened, synchronize, reopened]
-    branches-ignore:
-      - renovate/**
   issue_comment:
     types: [created]
 
@@ -74,8 +72,15 @@ jobs:
     # suppresses events from bot-posted comments, but a PAT/App token would not.
     # issue_comment triggers are further gated on author_association so only
     # MEMBER/OWNER/COLLABORATOR users can spend LLM quota via re-review.
+    # Renovate PRs are excluded here rather than with branches-ignore on the
+    # trigger: pull_request_target branch filters match the PR's base branch
+    # (which renovate PRs always target, main), so they can never exclude the
+    # renovate/* head branch.
     if: |
-      github.event_name == 'pull_request_target'
+      (
+        github.event_name == 'pull_request_target'
+        && !startsWith(github.head_ref, 'renovate/')
+      )
       || (
         github.event_name == 'issue_comment'
         && github.event.issue.pull_request