Security changelog digest

Summary

Code and secret risk assessments now display whether findings are in protected or unprotected repositories.

Summary

GitHub Actions will block pull_request_target events by default in all public repositories starting Dec 2, 2026.