mirror of
https://github.com/diegosouzapw/OmniRoute.git
synced 2026-09-13 18:32:12 +03:00
767d846a44
Same as the release/v3.8.51 twin (#12022): CodeQL flags an input-controlled checkout next to setup-node's npm cache on the default branch as cache poisoning (actions/cache-poisoning/poisonable-step), and it tracks the taint through any job output. The ref is not an input any more; checkouts use github.ref, so `gh workflow run electron-release.yml --ref v3.8.50 -f version=v3.8.50` rebuilds the tag and `--ref main` builds the repaired line (which is how the v3.8.50 assets were rebuilt). The tag-push path is unchanged.