Skip to content

Remove bootstrap-sha from release-please config#13

Merged
ChipWolf merged 2 commits into
fix/code-scanning-remediationfrom
copilot/sub-pr-12
Mar 23, 2026
Merged

Remove bootstrap-sha from release-please config#13
ChipWolf merged 2 commits into
fix/code-scanning-remediationfrom
copilot/sub-pr-12

Conversation

Copy link
Copy Markdown
Contributor

Copilot AI commented Mar 23, 2026

bootstrap-sha was truncated to 12 characters, which would never match full SHAs used by the GitHub API — effectively disabling the boundary entirely. Since the value is no longer needed, remove it rather than fix it.

Changes

  • Removed bootstrap-sha from release-please-config.json

📍 Connect Copilot coding agent with Jira, Azure Boards or Linear to delegate work to Copilot in one click without leaving your project management tool.

Copilot AI changed the title [WIP] [WIP] Address feedback by removing unnecessary bootstrap-sha from security fix PR Remove bootstrap-sha from release-please config Mar 23, 2026
Copilot AI requested a review from ChipWolf March 23, 2026 10:35
@ChipWolf ChipWolf marked this pull request as ready for review March 23, 2026 10:36
@ChipWolf ChipWolf merged commit 1ae5171 into fix/code-scanning-remediation Mar 23, 2026
1 check failed
@ChipWolf ChipWolf deleted the copilot/sub-pr-12 branch March 23, 2026 10:36
ChipWolf added a commit that referenced this pull request Mar 24, 2026
* Initial plan

* chore: remove bootstrap-sha from release-please-config

Co-authored-by: ChipWolf <3164166+ChipWolf@users.noreply.github.com>
Agent-Logs-Url: https://github.com/ChipWolf/dotfiles/sessions/bc6eb169-ea92-4fad-b9aa-20a78a277213

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: ChipWolf <3164166+ChipWolf@users.noreply.github.com>
ChipWolf added a commit that referenced this pull request Mar 24, 2026
…scripts (#12)

* fix(security): remediate code scanning findings across workflows and scripts

Pin GitHub Actions and container references, tighten workflow permissions, and harden installer/profile scripts to eliminate flagged risky patterns. Also update Dockerfile security posture and shell lint issues while preserving existing behavior.

Made-with: Cursor

* Remove bootstrap-sha from release-please config (#13)

* Initial plan

* chore: remove bootstrap-sha from release-please-config

Co-authored-by: ChipWolf <3164166+ChipWolf@users.noreply.github.com>
Agent-Logs-Url: https://github.com/ChipWolf/dotfiles/sessions/bc6eb169-ea92-4fad-b9aa-20a78a277213

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: ChipWolf <3164166+ChipWolf@users.noreply.github.com>

* Fix PowerShell init script scope with dot-sourcing

Co-authored-by: Chip Wolf ‮ <ChipWolf@users.noreply.github.com>

---------

Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com>
Co-authored-by: ChipWolf <3164166+ChipWolf@users.noreply.github.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Chip Wolf ‮ <ChipWolf@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants