Security
- Extend request body size cap to all JSON API endpoints (GHSA-28pq-6qxg-wg5r)
- Pin Github Actions workflow versions using full commit SHA
- Do not use npm cache to prevent cache poisoning
- Disable GitHub Actions credential persistence for checkout steps