Audit pull_request_target workflows, evaluate narrow actor and event policies, and verify GitHub Actions workflow execution protections before November 2.
Inventory every self-hosted runner, query version-specific deprecation deadlines, and replace stale images before GitHub enforcement begins.
Audit JavaScript actions used by your .NET CI, force Node.js 24 across the workflow graph, and clear self-hosted runner blockers before September 23.
