7 Commits

Include renames

Author	SHA1	Message	Date
Kai (Tam Nhu) Tran	74dd2f38cc	fix: harden release issue parsing (#1536) ... Hardens release issue parsing against a quadratic/ReDoS pattern while preserving parsing semantics.	2026-06-15 23:24:33 -04:00
Kai (Tam Nhu) Tran	2a3bc6807f	fix(ci): narrow issue reference parsing	2026-05-30 15:39:34 -04:00
Kai (Tam Nhu) Tran	2273757c83	fix(ci): harden self-hosted workflow trust boundaries ... Keep active CCS workflows on self-hosted runners, gate self-hosted PR execution to trusted authors, and scope privileged release credentials to the exact git operations that need them.	2026-05-12 12:34:15 -04:00
Tam Nhu Tran	e06e13ad0d	fix(ci): close release automation edge cases	2026-03-23 10:57:24 -04:00
Tam Nhu Tran	5616c68471	fix(ci): harden release automation workflows	2026-03-23 10:53:51 -04:00
kaitranntt	5a8db2c1ee	fix(ci): prevent shell injection from PR body markdown ... Pass PR title and body via env vars instead of direct interpolation. Prevents backticks in markdown code blocks from being executed as shell commands.	2025-12-13 23:31:52 -05:00
kaitranntt	5ef3e324f8	ci(release): add issue labeling for dev releases ... - Add label-pending-release.yml workflow to tag issues when PR created - Update dev-release.yml to comment and label issues after npm publish - Labels: pending-release (yellow), released-dev (blue) - Auto-removes pending-release when released-dev is applied	2025-12-12 05:57:58 -05:00