Important Update for GitHub Actions OIDC: Immutable Subject Claims
GitHub has introduced Immutable Subject Claims for OIDC, fixing a security issue caused by reusable organisation and repository names in the subject claim. Repositories created before 15 July 2026 must opt in manually, and Azure setups using Flexible Federated Credentials need their expressions updated to match.