[3rwww1]

Problem

• A reviewer can merge a PR the dry run said changed nothing. The dry run (the check that previews config changes without applying them) hides part of the change, then the real sync applies it.
• It only reads the first 30 changed files of a PR. pulls.listFiles is called without pagination, so the API default of 30 applies.
• So a PR touching more than 30 files under .github/repos/ gets a partial preview. When no safe-settings config file lands on that first page, the check run says Number of repos that were considered: 0 and concludes success.
• All three decisions in the handler read that same truncated list. The .github/settings.yml full-sync check, getChangedRepoConfigName and getChangedSubOrgConfigName all miss anything past page one.
• Seen on an org with ~130 repos on 2.1.21. A 129-file PR reported 0 repos considered; a later 23-file push on the same PR reported the expected repos.

Fix

• Paginate the call with per_page: 100. Five lines in index.js, and octokit.paginate is already used here for apps.listInstallations.
• No behavior change for a PR under 30 files.

Test

• No unit test added. test/unit/index.test.js is describe.skip('plugin', ...) in its entirety, so a new case there would never run, and none of its cases cover the check_run.created path.
• Lint and tests pass. Pre-existing lint issue unchanged; 148 unit tests passed, 2 suites skipped.

Fixes #1080

[3rwww1]

Hi @decyjphr, CI and CodeQL are green on this one. Gentle nudge, no rush, just making sure it is on your radar. Thanks for maintaining safe-settings!

[3rwww1]

Rebased on main and fixed the unit test mock for the paginated file listing. Could a maintainer approve the workflow run so CI can check the new head? Thanks.