Skip to content

Prevent shell injection in GitHub Actions release workflows - #6420

Merged
Kerollmops merged 1 commit into
mainfrom
fix_code_security_issues
Jun 8, 2026
Merged

Prevent shell injection in GitHub Actions release workflows#6420
Kerollmops merged 1 commit into
mainfrom
fix_code_security_issues

Conversation

@curquiza

@curquiza curquiza commented Jun 1, 2026

Copy link
Copy Markdown
Member

Related issue

Fixes code vuln reported by Bastion

Generative AI tools

  • This PR does not use generative AI tooling
  • This PR uses generative AI tooling and respect the related policies
    • Bastion MCP & Claude

Requirements

⚠️ Ensure the following requirements before merging ⚠️

  • Automated tests have been added.
  • If some tests cannot be automated, manual rigorous tests should be applied.
  • ⚠️ If there is any change in the DB:
    • Test that any impacted DB still works as expected after using --experimental-dumpless-upgrade on a DB created with the last released Meilisearch
    • Test that during the upgrade, search is still available (artificially make the upgrade longer if needed)
    • Set the db change label.
  • If necessary, the feature have been tested in the Cloud production environment (with prototypes) and the Cloud UI is ready.
  • If necessary, the documentation related to the implemented feature in the PR is ready.
  • If necessary, the integrations related to the implemented feature in the PR are ready.

@curquiza curquiza added tooling Not directly project related, like Docker, Homebrew... security Address a security vulnerability maintenance labels Jun 1, 2026
@curquiza
curquiza requested a review from Kerollmops June 1, 2026 14:37
@curquiza curquiza added the no db change The database didn't change label Jun 1, 2026

@Kerollmops Kerollmops left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let's see how it goes! Thanks 🚀

@Kerollmops
Kerollmops added this pull request to the merge queue Jun 8, 2026
Merged via the queue into main with commit 61dfc50 Jun 8, 2026
54 of 60 checks passed
@Kerollmops
Kerollmops deleted the fix_code_security_issues branch June 8, 2026 09:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance no db change The database didn't change security Address a security vulnerability tooling Not directly project related, like Docker, Homebrew...

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants