docs(changelog): note jasperreports 7.0.7 bump in v1.6.7 Build

Cherry-picked 252abef (PR #111) from main to develop in the
preceding commit. Adding the corresponding CHANGELOG entry under
v1.6.7 - Planned § Build so the cut tag includes the bump and the
release notes acknowledge it.

The original PR landed on main only because dependabot.yml had no
`target-branch` override and the repo's default branch is main.
The structural fix (`target-branch: develop`) is queued as v1.6.8
Track J1.

Pre-cut review (2026-06-01) flagged this divergence; cherry-pick +
this note clear the only critical from that review before tagging
v1.6.7.

Author: DemchaAV

CHANGELOG.md

@@ -87,6 +87,10 @@ The next minor with new canonical DSL primitives is **v1.7.0**
   `snakeyaml.version` property. SnakeYAML is now resolved
   transitively (and `optional`) through `jackson-dataformat-yaml`,
   which version-aligns it with Jackson's BOM.
+- Bumped `net.sf.jasperreports:jasperreports` 6.21.3 → 7.0.7
+  in the benchmarks module. Benchmarks are a sibling Maven module
+  consumed only by the manual performance harness — no impact on
+  library consumers ([#111](https://github.com/DemchaAV/GraphCompose/pull/111)).
 
 ### Documentation