Logan Yang e3f57e0dfd ci: add automated release workflow on PR merge (#2256) ... * ci: add automated release workflow on PR merge Triggers when a PR targeting master is merged with a strict semver title (e.g., "3.2.3"). Builds the plugin and creates a GitHub Release with main.js, manifest.json, and styles.css attached. Non-semver PR titles are silently skipped. Includes manifest.json version match validation and shell injection protection for release notes. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: pin release checkout to merge commit SHA Avoids race condition where a concurrent PR merge could cause the release workflow to build a different commit than the one that triggered it. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> * fix: prevent shell injection in release workflow and add idempotency check Use env vars instead of inline ${{ }} expansion for PR title and version outputs to prevent shell injection. Add pre-check to skip release creation if the version tag already exists. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * fix: pin release tag to merge commit SHA via --target flag Ensures gh release create tags exactly the merge commit, preventing a source/binary mismatch if concurrent merges land before the step runs. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>		2026-03-03 21:37:02 -08:00
..
node.js.yml	Implement autonomous agent (#1689)	2025-08-04 09:51:18 -07:00
release.yml	ci: add automated release workflow on PR merge (#2256)	2026-03-03 21:37:02 -08:00