1.15.3
ci: pin third-party actions to commit SHAs (#5869)
Restrict docs broken-links workflow permissions (#6330)
ci: pin third-party actions to commit SHAs
chore: resolve pip-audit failures for click, pillow, and json-repair (#6542)