1.15.2
ci: pin third-party actions to commit SHAs (#5869)
Restrict docs broken-links workflow permissions (#6330)
ci: pin third-party actions to commit SHAs
fix: resolve pip-audit failures (onnx 1.22.0, nltk PYSEC-2026-597) (#6472)