A pull request's version file could take over a release workflow GitHub Security Lab traces how a newline became privileged command execution. Consumers of unified-github-workflows need v1.0.44 or a verified fixed commit.