Files
Eric MeyandClaude Opus 4.6 d727938d94 fix: prevent shell injection in auto-release commit message parsing
Pass commit message via env context instead of direct interpolation
to prevent shell execution of special characters in PR bodies.
Also only parse the first line so the body is never evaluated.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-01 23:49:25 -04:00
..
2026-04-01 23:04:57 -04:00