Merge pull request #22 from IanSkelskey/dev

v0.3.1 - Security update

Author: IanSkelskey

.github/workflows/format.yml

@@ -8,6 +8,10 @@ on:
         branches:
             - 'dev'
 
+permissions:
+    contents: write
+    pull-requests: write
+
 jobs:
     prettier:
         runs-on: ubuntu-latest

.github/workflows/pre-publish.yml

@@ -7,6 +7,9 @@ on:
         paths:
             - 'src/**'
 
+permissions:
+    contents: read
+
 jobs:
     prettier-check:
         runs-on: ubuntu-latest
@@ -28,6 +31,9 @@ jobs:
     test:
         runs-on: ubuntu-latest
         needs: prettier-check
+        permissions:
+            contents: read
+            actions: write # For uploading artifacts
         steps:
             - name: Checkout code
               uses: actions/checkout@v2

.github/workflows/publish.yml

@@ -7,6 +7,9 @@ on:
         paths:
             - 'src/**'
 
+permissions:
+    contents: read
+
 jobs:
     publish:
         runs-on: ubuntu-latest

CHANGELOG.md

@@ -153,3 +153,16 @@ This file is written automatically by the [version bump script](version-bump.ts)
 ### Documentation
 
 -   Added instructions for testing Evergit as a global command.
+
+## [0.3.1] - 2025-06-26
+
+![Increment](https://img.shields.io/badge/patch-purple)
+
+## Changelog Summary
+
+-   **GitHub Actions Workflow Enhancements**
+
+    -   Updated workflows to include explicit permissions for improved security and clarity.
+
+-   **Commit Message Sanitizer Fix**
+    -   Escaped backslashes before double quotes to ensure correct processing of commit messages.

README.md

@@ -1,6 +1,6 @@
 # EverGit
 
-![Version](https://img.shields.io/badge/version-0.3.0-blue)
+![Version](https://img.shields.io/badge/version-0.3.1-blue)
 
 ![TypeScript](https://img.shields.io/badge/typescript-007ACC?style=for-the-badge&logo=typescript&logoColor=white)
 ![OpenAI](https://img.shields.io/badge/OpenAI-00A79D?style=for-the-badge&logo=openai&logoColor=white)