Merge branch 'main' into spec-clarifications-from-security-audit

Author: swcurran

.github/workflows/render-specs.yml

@@ -13,7 +13,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout 🛎️
-        uses: actions/checkout@v6 # If you're using actions/checkout@v6 you must set persist-credentials to false in most cases for the deployment to work correctly.
+        uses: actions/checkout@v7 # If you're using actions/checkout@v7 you must set persist-credentials to false in most cases for the deployment to work correctly.
         with:
           persist-credentials: false