GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub updated actions/checkout to block common pwn request attack patterns by default, effective June 18, 2026. The change prevents pull_request_target workflows from fetching fork pull request code without explicit opt-out. Backporting to all supported major versions occurs July 16, 2026.