From fea599d2a288112d566b798a48615dcd1c6e1b87 Mon Sep 17 00:00:00 2001
From: Markus Holtermann <info@markusholtermann.eu>
Date: Thu, 6 Nov 2025 14:24:28 +0100
Subject: [5.2.x] Fixed unsafe variable interpolation in GitHub Action
 workflow.

Thank you Davide Netti for the report and initial patch.

Co-authored-by: Davide Netti <davide.netti4@gmail.com>

Backport of 01c70ba14899409e86dc3f6c6bcae0afc48094e7 from main.
---
 .github/workflows/check_commit_messages.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

(limited to '.github/workflows/check_commit_messages.yml')

diff --git a/.github/workflows/check_commit_messages.yml b/.github/workflows/check_commit_messages.yml
index ee9536f482..8fc5dd5cdf 100644
--- a/.github/workflows/check_commit_messages.yml
+++ b/.github/workflows/check_commit_messages.yml
@@ -24,8 +24,9 @@ jobs:
           echo "prefix=[$VERSION]" >> $GITHUB_OUTPUT
 
       - name: Check PR title prefix
+        env:
+          TITLE: ${{ github.event.pull_request.title }}
         run: |
-          TITLE="${{ github.event.pull_request.title }}"
           PREFIX="${{ steps.vars.outputs.prefix }}"
           if [[ "$TITLE" != "$PREFIX"* ]]; then
             echo "❌ PR title must start with the required prefix: $PREFIX"
-- 
cgit v1.3