notazof/postit-debian
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

fix release.yml: GITHUB_TOKEN sanitized + quote multi-line env values

Browse source 
- GITHUB_TOKEN expression was sanitized to '*** ... }}' by an
  upstream templating pass, breaking YAML parse on Forgejo with
  'did not find expected alphabetic or numeric character' at
  line 223.
- RELEASE_BODY and IS_PRERELEASE are quoted (YAML double-quoted
  string) so the parser accepts multi-line release body content
  sourced from CHANGELOG.md.

Verified locally with yaml.safe_load.
This commit is contained in:
Paul Schneider 2026-08-17 15:45:59 +01:00
commit 94e481fb6e
No known key found for this signature in database
GPG key ID: 1E66C65EE2B46F1B
1 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

12
.forgejo/workflows/release.yml
View file

@ -220,12 +220,18 @@ jobs:
- name: Publier la release Forgejo via l'API REST
env:
GITHUB_TOKEN: *** secrets.GITHUB_TOKEN }}
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
GITHUB_API_URL: ${{ github.api_url }}
GITHUB_REPOSITORY: ${{ github.repository }}
TAG: ${{ github.event_name == 'push' && github.ref_name || inputs.tag }}
RELEASE_BODY: ${{ env.RELEASE_BODY }}
IS_PRERELEASE: ${{ env.IS_PRERELEASE }}
# RELEASE_BODY peut contenir des retours à la ligne et
# des caractères YAML-réservés (':', '#', etc.) issus du
# CHANGELOG.md. On le quote en YAML double-quoted string
# pour que le parser Forgejo accepte la valeur multi-ligne.
# Sinon : "yaml: line N: did not find expected alphabetic
# or numeric character".
RELEASE_BODY: "${{ env.RELEASE_BODY }}"
IS_PRERELEASE: "${{ env.IS_PRERELEASE }}"
run: |
if [[ -z "$TAG" ]]; then
echo "::error::No tag resolved for the API call."