v0.1.1

github-actions released this 17 Jul 12:10

f10ff2c

ci(release): harden NuGet publish per security review

- Pass the Trusted-Publishing key via env instead of inline ${{ }} in run:
  (avoids secret exposure on the command line and expression injection).
- Pin third-party actions to full commit SHAs: NuGet/login (v1) and
  softprops/action-gh-release (v2).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Assets 5