Merge remote-tracking branch 'origin/main' into dependabot-fix/CVE-2026-29062

Co-authored-by: Ona <no-reply@ona.com>

Author: meysholdt

.github/workflows/osv-scanner.yml

@@ -34,13 +34,11 @@ jobs:
       fail-on-vuln: false
       scan-args: |-
         -r
-        --skip-git
         ./
   scan-pr:
     if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }}
     uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@98b584ee2ed2da3935ccce10e06739d54cdcd20b" # v2.0.0
     with:
       scan-args: |-
         -r
-        --skip-git
         ./