GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

GitHub is enhancing software supply chain security by updating its actions/checkout feature to prevent pwn request attacks. The update targets the misuse of the pull_request_target workflow trigger, which can be exploited to run malicious code with elevated privileges. The change is intended to block such attacks. The updated version of actions/checkout is set to take effect on June 18, 2026. This update aims to mitigate the risks associated with the workflow trigger. The actions/checkout feature is used for checking out a repository into the workflow environment.