Skip to content

chore(main): release 2.8.2#2471

Open
github-actions[bot] wants to merge 2 commits intomainfrom
release-please--branches--main--components--teams-for-linux
Open

chore(main): release 2.8.2#2471
github-actions[bot] wants to merge 2 commits intomainfrom
release-please--branches--main--components--teams-for-linux

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented Apr 24, 2026

🤖 I have created a release beep boop

2.8.2 (2026-04-25)

Bug Fixes

  • ci: correct SHA pin for release-please-action v4.2.0 (#2470) (6b92755)
  • release: strip markdown from appdata entries, bump manifest to 2.8.1 (#2472) (c4e1962)

This PR was generated with Release Please. See documentation.

IsmaelMartinez added a commit that referenced this pull request Apr 25, 2026
….8.1 (#2472)

* fix(release): strip markdown from appdata <li> and bump manifest to 2.8.1

The first release-please run (PR #2471) showed two issues in the
auto-generated AppStream description. Markdown bold and link syntax
from CHANGELOG.md leaked verbatim into <li> elements (rendered as
literal asterisks and bracketed strings in Flathub, GNOME Software,
and KDE Discover), and the manifest still pointed at 2.8.0 even
though v2.8.1 was already tagged, so release-please was preparing a
duplicate 2.8.1 release.

- scripts/update-appdata-xml.js: flatten [label](url) to label, drop
  **bold** markers, and strip the trailing short-sha parenthetical
  that duplicates the PR-number link.
- .release-please-manifest.json: advance baseline to 2.8.1 so the
  next Release PR targets 2.8.2.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(release): bound stripMarkdown regex quantifiers

SonarCloud flagged the unbounded greedy quantifiers as potential
ReDoS hotspots. The patterns are linear in practice (negated classes
exclude their delimiter, so backtracking is one-step), but explicit
upper bounds make the intent clear and silence the warning.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(release): drop \s* quantifiers in trailing-sha regex

Sonar continued to flag the leading \s* in the trailing-sha pattern
as a backtracking risk. Trim first, then require \s+ before the sha
group, so the pattern has no unbounded whitespace quantifiers and
the input it sees is already right-trimmed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(release): use literal space instead of \s+ before trailing sha

release-please always emits a single space before the (shortsha)
annotation, so a literal space is sufficient and removes the only
remaining quantifier Sonar's heuristic was flagging on this line.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

* fix(release): use replaceAll for global stripMarkdown patterns

SonarCloud's es2021/readability rule prefers replaceAll() when the
regex has the /g flag and the operation is conceptually a replace-all.
The trailing-sha removal stays on replace() because it's a single
anchored match, not a global one.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@github-actions github-actions Bot changed the title chore(main): release 2.8.1 chore(main): release 2.8.2 Apr 25, 2026
@github-actions github-actions Bot force-pushed the release-please--branches--main--components--teams-for-linux branch from 44506e3 to da7a303 Compare April 25, 2026 21:19
@sonarqubecloud
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants