CI BUG

Describe the bug
PRs can be inadvertently merged without any check if submitted by unauthorized users or if a new commit is submitted.
Example: #11650

NOTE: If merged, it will exclude the last commits!

To Reproduce
The external user creates a PR and is approved.
(Optional) a new commit is created after the first authorized CI check.

Result
PR can be merged without a new check, if new commits are added, they will be discarded.

Expected Result
Merge is prevented without a CI check as usual.

Screenshots

Additional context