From c2973072f60a313227ef41f4f4acacda8d1919b9 Mon Sep 17 00:00:00 2001
From: Fabian Jocks <24557998+iamfj@users.noreply.github.com>
Date: Thu, 23 Apr 2026 10:02:47 +0200
Subject: [PATCH] fix(ci): avoid shell interpolation in promotion PR body

---
 .github/workflows/promote-next-to-main.yml | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/promote-next-to-main.yml b/.github/workflows/promote-next-to-main.yml
index a2d29f17..cf2f2174 100644
--- a/.github/workflows/promote-next-to-main.yml
+++ b/.github/workflows/promote-next-to-main.yml
@@ -114,10 +114,15 @@ jobs:
       - name: Upsert promotion PR
         env:
           GH_TOKEN: ${{ steps.app-token.outputs.token }}
+          PROMOTION_PR_TITLE: ${{ steps.meta.outputs.title }}
+          PROMOTION_PR_BODY: ${{ steps.meta.outputs.body }}
         shell: bash
         run: |
           set -euo pipefail
 
+          body_file=$(mktemp)
+          printf '%s\n' "$PROMOTION_PR_BODY" > "$body_file"
+
           existing=$(gh pr list \
             --state open \
             --base main \
@@ -127,14 +132,14 @@ jobs:
 
           if [ -n "$existing" ]; then
             gh pr edit "$existing" \
-              --title "${{ steps.meta.outputs.title }}" \
-              --body "${{ steps.meta.outputs.body }}"
+              --title "$PROMOTION_PR_TITLE" \
+              --body-file "$body_file"
             echo "Updated PR #$existing"
           else
             gh pr create \
               --base main \
               --head next \
-              --title "${{ steps.meta.outputs.title }}" \
-              --body "${{ steps.meta.outputs.body }}"
+              --title "$PROMOTION_PR_TITLE" \
+              --body-file "$body_file"
             echo "Created promotion PR"
           fi