Update to forbidden-apis 1.4.1

Closes #5492