qwen-code/packages
wenshao 3e105452a2 fix: use temp file + quoted heredoc for shell-safe comment body
Review content may contain double quotes, $VAR, backticks, etc. that
break double-quoted shell arguments or trigger run_shell_command security
rejection. Replace direct string interpolation with a two-step approach:

1. Write body to temp file via quoted heredoc (<<'BODYEOF') which
   prevents ALL shell expansion
2. Reference file with -F body=@/tmp/pr-comment.txt in gh api calls
   and --body-file in gh pr review calls

Also update Step 5 to clean up all temp files.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-29 20:43:01 +08:00
..
cli Merge pull request #2645 from QwenLM/fix/git_bash_change_windows 2026-03-26 13:04:38 +08:00
core fix: use temp file + quoted heredoc for shell-safe comment body 2026-03-29 20:43:01 +08:00
sdk-java fix(core/rateLimit): add support for IdealTalk rate limit error code 1305 2026-02-28 11:05:41 +08:00
sdk-typescript feat: add system prompt customization options in SDK and CLI 2026-03-16 02:57:31 +08:00
test-utils chore: bump version to 0.13.0 2026-03-18 10:41:32 +08:00
vscode-ide-companion Merge pull request #2591 from QwenLM/fix/2515-vscode-context-indicator 2026-03-26 10:23:32 +08:00
web-templates refactor(export): clean up unnecessary fields and simplify data structure 2026-03-19 14:33:33 +08:00
webui feat(vscode-ide-companion): add image paste support (#1978) 2026-03-20 13:47:09 +08:00
zed-extension chore(zed-extension): update package version to 0.10.0 2026-02-06 14:26:01 +08:00