Skip to content

ci(release): fix GitHub release-notes shell quoting (unblocks 0.16.0) - #224

Merged
eFAILution merged 1 commit into
mainfrom
ci/fix-release-notes-quoting
Jul 8, 2026
Merged

eFAILution merged 1 commit into
mainfrom
ci/fix-release-notes-quoting

Conversation

@eFAILution

Copy link
Copy Markdown
Owner

Problem

The main release job failed cutting 0.16.0 (run 28943563537):

ERROR /bin/sh: 6: Syntax error: "(" unexpected

Version logic was correct (0.15.6 → 0.16.0, even-minor check passed) and the VSIX packaged — it died generating the GitHub release notes. main is clean at the #208 merge (no partial 0.16.0 tag/release).

Root cause

.release-it.json set github.releaseNotes: "echo '${changelog}'", run via sh -c. This release's changelog includes #205's title "enum input values aren't offered…" — the apostrophe in aren't closes the single quote, exposing the changelog's markdown parens to dash. Data-dependent, so earlier 0.14.x releases passed.

Fix

Remove the redundant echo wrapper. @release-it/conventional-changelog already supplies the changelog as the GitHub release body, so release notes are unchanged — just no longer routed through a fragile shell command.

Effect

Merging re-triggers the release job on main and cuts 0.16.0 with the fixed config.

Note: targeted at main because beta was deleted when #208 merged; it should be recreated from main afterward to restore the pre-release channel.

release-it ran github.releaseNotes ("echo '${changelog}'") through /bin/sh. When the changelog contains an apostrophe — e.g. #205's title "enum input values aren't offered..." — it closes the single quote, exposing the changelog's markdown parentheses to dash and crashing with 'Syntax error: "(" unexpected'. This failed the main release job while cutting 0.16.0. Remove the redundant echo wrapper; @release-it/conventional-changelog already supplies the changelog as the GitHub release body, so notes are unchanged.
@eFAILution
eFAILution merged commit acba5dd into main Jul 8, 2026
24 checks passed
@github-actions

github-actions Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

🛡️ Security Hardening Pipeline Results

Branch: ci/fix-release-notes-quoting
Commit: 2f9fa1f

Workflow Run: 306
Branch: ci/fix-release-notes-quoting
Commit: 2f9fa1f

Scan Status

Scanner Status
bandit ⏭️ skipped
checkov ⏭️ skipped
clamav ⏭️ skipped
codeql ✅ PASS
container ⏭️ skipped
dependency-review ✅ PASS
gitleaks ✅ PASS
grype ⏭️ skipped
infrastructure ⏭️ skipped
lint ⏭️ skipped
opengrep ⏭️ skipped
osv ✅ PASS
sbom ⏭️ skipped
supply-chain ⏭️ skipped
trivy-container ⏭️ skipped
trivy-iac ⏭️ skipped
zap ⏭️ skipped

✅ All enabled scanners completed successfully.

Summaries Collected: 2

Scanner Results

🔬 CodeQL SAST (Javascript)

Status: Completed

Findings Summary

Critical High Medium Low Total
0 0 0 0 0

No security findings detected for Javascript.

Artifacts: CodeQL Reports (Javascript)

🔗 Dependency Review

Status: ✅ No issues found

No vulnerable or license-violating dependencies detected in this PR.
📋 View full report


Generated by Argus


Generated by Argus

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant