goodolclint-claude[bot] 4cc4e86cfb ci: read the release tag from the environment, and refuse tags that are not a version (#159) ...

The tag name was substituted into the pwsh script text by expression, so a
tag containing a quote could run arbitrary PowerShell in the job that holds
NUGET_API_KEY. The script now reads it from an env var and rejects anything
that is not vX.Y.Z with an optional prerelease suffix.

Co-authored-by: goodolclint-claude[bot] <323206664+goodolclint-claude[bot]@users.noreply.github.com>

2026-09-02 13:20:57 -05:00

..

build.yml

Merge branch 'main' into dependabot/github_actions/main/actions/setup-dotnet-6

2026-08-31 17:15:49 +00:00

claude-code-review.yml

ci: take review instructions from the default branch, and gate self-approval (#132)

2026-09-02 10:29:07 -05:00

claude.yml

chore(deps): bump actions/checkout from 6 to 7

2026-08-31 17:07:37 +00:00

integration-tests.yml

ci: run integration tests on manual dispatch only during the remediation waves (#158)

2026-09-02 11:24:27 -05:00

package-currency.yml

docs: migrate DECISIONS.md to house-format ADRs, and retire the review folder (#131)

2026-09-02 14:49:07 +00:00

publish.yml

ci: read the release tag from the environment, and refuse tags that are not a version (#159)

2026-09-02 13:20:57 -05:00

unit-tests.yml

docs: migrate DECISIONS.md to house-format ADRs, and retire the review folder (#131)

2026-09-02 14:49:07 +00:00