1.15.7
ci: pin third-party actions to commit SHAs (#5869)
Restrict docs broken-links workflow permissions (#6330)
ci: pin third-party actions to commit SHAs
chore: bump json-repair to 0.60.1, drop fixed vuln ignores in scan (#6612)