Glad you got it updated before you missed an event! That's the worry that made me look for something flexible and software-defined that I could run in GitHub Actions.
> You could of course write a cron script to regularly check Github hooks IPs and update firewall if Github changes it's webhooks IPs.
This is way easier and simpler than any other solution. It will be a mere 6 line script.