Skip to content

Update Release with Regex Validation#130

Merged
jaxdesmarais merged 1 commit intomasterfrom
security/validate-release-version-input
Mar 10, 2026
Merged

Update Release with Regex Validation#130
jaxdesmarais merged 1 commit intomasterfrom
security/validate-release-version-input

Conversation

@jaxdesmarais
Copy link
Copy Markdown
Contributor

Summary of changes

  • Update for security fix to validate SDK version via regex to prevent malicious code from running

Checklist

  • [ ] Added a changelog entry

Authors

Add validate_version job that runs before build and test jobs to
sanitize the manually-entered version string. Uses bash regex to
enforce x.x.x or x.x.x-betaN format, prevents leading zeros, and
enforces a max length of 50 characters. Also adds set -euo pipefail
to the bump_version run step.
@jaxdesmarais jaxdesmarais requested a review from a team as a code owner March 9, 2026 20:56
@jaxdesmarais jaxdesmarais merged commit b7f205d into master Mar 10, 2026
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants