Commit Graph

3 Commits

Author SHA1 Message Date
sen 0223a45bb3 [root]fix: address PR review feedback
- Add empty permissions block to discord-release-notify.yml (least privilege)
- Fix shell injection risk: pass published_list via env var instead of
  inline ${{ }} expansion to avoid backtick command substitution
2026-03-20 16:11:34 +08:00
sen 85f413fa65 [root]fix: remove avatar_url from Discord webhook payloads
Use webhook's configured avatar instead of overriding it in payload.
2026-03-20 16:10:40 +08:00
sen 0f7a07152a [root]feat: add Discord release notifications
- Add discord-release-notify.yml workflow triggered on GitHub Release events
  - CLI releases: green embed with install instructions (macOS/Linux, Windows, npm)
  - Extension releases: blue embed
  - Dify Plugin releases: purple embed
  - Cleans PR attribution links and Full Changelog from release body
  - Truncates to Discord 4096 char embed limit
- Add npm publish Discord notification step to release.yml publish-js job
  - Orange embed listing all published packages with versions
  - Only fires when packages are actually published
2026-03-20 15:59:42 +08:00