From 56784b451a8fd646d4cc380c3b13a26a7c3ee5ad Mon Sep 17 00:00:00 2001
From: Mykhailo Chalyi <mike@chaliy.name>
Date: Sun, 17 May 2026 20:02:46 -0500
Subject: [PATCH] fix(ci): avoid shell interpolation of release tags

---
 .github/workflows/publish.yml | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 142d499..510b98b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -30,11 +30,15 @@ jobs:
           rustup default stable
 
       - name: Verify version matches tag
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          INPUT_RELEASE_TAG: ${{ inputs.release_tag }}
+          RELEASE_TAG_NAME: ${{ github.event.release.tag_name }}
         run: |
-          if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            TAG_VERSION="${{ inputs.release_tag }}"
+          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+            TAG_VERSION="$INPUT_RELEASE_TAG"
           else
-            TAG_VERSION="${{ github.event.release.tag_name }}"
+            TAG_VERSION="$RELEASE_TAG_NAME"
           fi
           if [ -z "$TAG_VERSION" ]; then
             echo "Error: release tag is required"