msd-core/.changeset/safe-herons-parse.md at next

Files

Michel Moreira 49f313d611 fix(#4461 ): make code-review summary extraction shell-safe (#4533 )

* fix(#4461): make code-review summary extraction shell-safe

Emitted-Drift-Ack-Growth: code-review.md — use a literal heredoc for shell-safe SUMMARY parsing

* chore: add changeset for #4533

* fix(#4461): keep heredoc outside command substitution

* chore: rerun CI after Windows timeout

* test(#4461): execute the summary heredoc adversarially

* test(#4461): normalize adversarial paths for Git Bash

* test(#4461): keep adversarial fixture valid on Windows

* test(#4461): scope heredoc regression claim

---------

Co-authored-by: Tom Boucher <trekkie@nomorestars.com>

2026-09-16 03:23:11 -04:00

283 B

Raw Permalink Blame History

type, pr

type	pr
Fixed	4533

/gsd-code-review can parse phase SUMMARY files without shell syntax errors — the embedded JavaScript now runs from a literal heredoc and receives the SUMMARY path through argv, so quotes and backticks cannot break the workflow command. (#4461)

283 B Raw Permalink Blame History

283 B

Raw Permalink Blame History