- Updated the checkout action to use safer default behavior for pull_request_target events, reducing token and secret exposure
- Workflows triggered by pull_request_target now run with limited permissions, mitigating common vulnerability patterns
- Improves overall security posture of GitHub Actions without breaking existing workflows
Safer pull_request_target defaults for GitHub Actions checkout
Official GitHub changelog summary with source attribution, release tags, and community reactions.
Track this GitHub release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this GitHub release note into a weekly digest for the tools you actually use.
Create digestMore GitHub changelog updates
Users can now pin saved issue views directly in the repository’s issues sidebar for one‑click access
Adds Windows 11 arm64 runner image with Visual Studio 2026 to GitHub‑hosted runners
Introduce a new "Mitigated" dismissal reason for code scanning alerts, enabling dismissal when external controls reduce risk.