Update forbidden-apis to 1.6