A pull request's version file could take over a release workflow
GitHub Security Lab traces how a newline became privileged command execution. Consumers of unified-github-workflows need v1.0.44 or a verified fixed commit.
Supply-Chain
Bun 1.4.4 blocks compromised certificate keys; rebuild compiled apps
Updating the operating system leaves Bun's bundled trust store unchanged. The fix must reach package managers, running services and standalone executables.