feat: add 2 new error entries (triggers, runner-environment) — 2026-06-22

[htekdev]

New error entries — June 22, 2026 cycle (Monday)

tr-123: Workflow execution protection actor/event ruleset silently blocks workflow from triggering

• Source: GitHub Changelog June 18, 2026 + GitHub Docs
• Category: triggers | Severity: silent-failure
• What's new: When an org/enterprise admin enables Workflow Execution Protections (new June 18, 2026 public preview) and configures actor or event rules, affected workflows silently never trigger — no run created, no PR check posted, no notification. Only discoverable via org audit log. Affects Dependabot, GitHub Apps, Copilot, and role-restricted users when not in the allow-list.

re-515: Self-hosted runner silently stops receiving jobs — auto-update disabled, runner falls behind 30-day rolling version floor

• Source: GitHub Changelog June 12, 2026
• Category: runner-environment | Severity: silent-failure
• What's new: Distinct from re-284 (registration/config blocking). Documents the runtime failure: runners that registered at v2.329.0+ but have auto-update disabled will silently stop getting jobs dispatched after falling 30+ days behind the latest release. Jobs stay in Queued indefinitely with no workflow log error. Config+Runtime brownout windows start July 13 (Data Residency) and September 9 (GH Enterprise Cloud).

Validation pass: 8 entries — all accurate, no corrections needed

• re-268 (ubuntu-22.04 brownout Sept 17/Apr 17) ✅
• re-284 (self-hosted runner v2.329.0 enforcement) ✅
• re-510 (windows-11-arm label migration Sept 2026) ✅
• sf-233 (windows-2025 default Java 8→17) ✅
• pa-124 (OIDC sub claim mismatch pull_request.closed) ✅
• ys-071 (duplicate step id validation failure) ✅
• ct-019 (reusable workflow concurrency collision) ✅
• ku-037 (skipped jobs block PR merge) ✅
  No corrections needed.