Repository navigation

Hardening patches - #63

Merged

Edouard-chin merged 6 commits into

Shopify:mainfrom

tenderworks:patches

Sep 18, 2026

Merged

Hardening patches#63
Edouard-chin merged 6 commits into
Shopify:mainfrom
tenderworks:patches

Commits on Sep 18, 2026
- Pass gem filenames to `gem push` as argv, not a shell string
  
  authored and
  Edouard-chin
  committed
  8eab395
- Run the rake subprocess as argv instead of a command string
  
  authored and
  Edouard-chin
  committed
  d266237
- Refuse to publish a .gem whose basename is not a plain gem name
  
  authored and
  Edouard-chin
  committed
  0e2761f
- Stop interpolating working-directory into github-script source
  
  authored and
  Edouard-chin
  committed
  569ddbe
- Pass the action's `version` input as data, not as shell code
  
  authored and
  Edouard-chin
  committed
  9af1b06
- Fix RuboCop offenses in action_test.rb
  Edouard-chin
  committed
  0b0e7c3