Merge branch '2.15' into 2.16

Author: cowtowncoder

release-notes/VERSION-2.x

@@ -128,7 +128,7 @@ No changes since 2.16.1
 #921: Add `JsonFactory.Feature.CHARSET_DETECTION` to disable charset detection
  (contributed by @yawkat) 
 #943: Add `StreamReadConstraints.maxNestingDepth()` to constraint max nesting
-  depth (default: 1000)
+  depth (default: 1000) [CVE-2025-52999]
 #948: Use `StreamConstraintsException` in name canonicalizers
  (contributed by @pjfanning)
 #962: Offer a way to directly set `StreamReadConstraints` via `JsonFactory` (not just Builder)