master
chore: Standardize license metadata across all first-party packages and tighten SBOM pipeline (no-changelog) (#31880)
ci: Refine Trivy scans, centralizes security config (#26384)
ci: Apply Trivy ignore-policy to filter n8n self-CVEs (#30584)