[PR #7858] [MERGED] [AI] zizmor: fix template injection in setup action's Lage cache step #105140

Closed
opened 2026-05-30 07:26:24 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/actualbudget/actual/pull/7858
Author: @MatissJanis
Created: 5/15/2026
Status: Merged
Merged: 5/15/2026
Merged by: @MatissJanis

Base: masterHead: claude/fix-github-actions-injection-8lvWF


📝 Commits (3)

  • b2658ac [AI] Fix template injection in setup action's Lage cache step
  • c098be7 [AI] Add release note for template injection fix
  • ba4b435 [AI] Rename release note to match PR #7858

📊 Changes

2 files changed (+9 additions, -1 deletions)

View changed files

📝 .github/actions/setup/action.yml (+3 -1)
upcoming-release-notes/7858.md (+6 -0)

📄 Description

Description

Yet another zizmor issue fix: template injection.

n/a

Testing

n/a

Checklist

  • Release notes added
  • No obvious regressions in affected areas
  • Self-review has been performed - I understand what each change in the code does and why it is needed

https://claude.ai/code/session_01CHJwotZCefYigsmZ1dqSPG


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/actualbudget/actual/pull/7858 **Author:** [@MatissJanis](https://github.com/MatissJanis) **Created:** 5/15/2026 **Status:** ✅ Merged **Merged:** 5/15/2026 **Merged by:** [@MatissJanis](https://github.com/MatissJanis) **Base:** `master` ← **Head:** `claude/fix-github-actions-injection-8lvWF` --- ### 📝 Commits (3) - [`b2658ac`](https://github.com/actualbudget/actual/commit/b2658ac8794ff0a770994284269ceda172144e4e) [AI] Fix template injection in setup action's Lage cache step - [`c098be7`](https://github.com/actualbudget/actual/commit/c098be732adf85ff4a78fe026d816340d79d7607) [AI] Add release note for template injection fix - [`ba4b435`](https://github.com/actualbudget/actual/commit/ba4b43569ad9dedcd7eb4f51fab8cdf563012377) [AI] Rename release note to match PR #7858 ### 📊 Changes **2 files changed** (+9 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/actions/setup/action.yml` (+3 -1) ➕ `upcoming-release-notes/7858.md` (+6 -0) </details> ### 📄 Description ## Description Yet another zizmor issue fix: template injection. ## Related issue(s) n/a ## Testing n/a ## Checklist - [x] Release notes added - [x] No obvious regressions in affected areas - [x] Self-review has been performed - I understand what each change in the code does and why it is needed https://claude.ai/code/session_01CHJwotZCefYigsmZ1dqSPG --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-05-30 07:26:25 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/actual#105140