Merge remote-tracking branch 'origin/main' into dependabot-fix/CVE-2026-29062

Co-authored-by: Ona <no-reply@ona.com>

Author: meysholdt

.github/workflows/osv-scanner.yml

@@ -22,10 +22,9 @@ on:
     branches: [ "main" ]
 
 permissions:
-  # Require writing security events to upload SARIF file to security tab
   security-events: write
-  # Read commit contents
   contents: read
+  actions: read
 
 jobs:
   scan-scheduled: