It is required to modify workflows according to the latest GitHub changes:
https://github.blog/changelog/2025-11-07-actions-pull_request_target-and-environment-branch-protections-changes/

Description:
GitHub updated how pull_request_target workflows are evaluated. Previously, these workflows were evaluated using the PR's target branch. Now, they are always evaluated using the repository's default branch (current). This means branch-filtered workflows will only trigger reliably if they exist and match on the default branch.