Matiss Janis Aboltins 62d7c0e479 [AI] zizmor: fix template injection in setup action's Lage cache step (#7858) ...

* [AI] Fix template injection in setup action's Lage cache step

The 'Ensure Lage cache directory exists' step expanded
${{ inputs.working-directory }} directly into the shell command via
format(), which zizmor flags as a code-injection risk. Pass the input
through an env var and reference it with shell expansion instead.

* [AI] Add release note for template injection fix

* [AI] Rename release note to match PR #7858

---------

Co-authored-by: Claude <noreply@anthropic.com>

2026-05-15 21:34:22 +00:00

..

ai-generated-release-notes

…

docs-spelling

[AI] Document Dev Container option in development-setup docs (#7729)

2026-05-09 15:45:57 +00:00

release-notes

…

setup

[AI] zizmor: fix template injection in setup action's Lage cache step (#7858)

2026-05-15 21:34:22 +00:00

handle-feature-requests.js

…