PULL_REQUEST_TARGET BLOCKED BY DEFAULT DECEMBER 2

Summary from the TLDR DevOps newsletter

GitHub Actions will block pull_request_target events by default in all public repositories starting December 2.