Skip to content

v2.2.3 - Fix YAML Syntax with Indented Heredocs

Choose a tag to compare

@StasonJatham StasonJatham released this 11 Nov 09:54
· 9 commits to master since this release

Bug Fixes

YAML Syntax Errors Finally Resolved

Fixed persistent YAML syntax errors in security workflows that were preventing them from running.

Root Cause: The YAML parser was interpreting heredoc content starting with # as YAML comments because the lines were not indented, causing the parser to think they were part of the YAML structure rather than shell script content.

Solution:

  • Changed from <<'EOF' to <<-'EOF' heredoc syntax (allows indented closing delimiter)
  • Indented all heredoc content lines to match the YAML context
  • This properly signals to the YAML parser that all content is part of the shell script

Validation: All workflow files validated locally with PyYAML parser before pushing.

Impact

  • Security workflows will now parse and run correctly on GitHub Actions
  • Automated security updates can proceed without syntax errors
  • Dependabot PR auto-merge workflow will function properly

Files Fixed

  • .github/workflows/dependabot-auto-merge.yml
  • .github/workflows/security-updates.yml