Update .github/workflows/publish-pypi.yml so manually supplied release inputs are passed to shell steps through environment variables rather than embedded directly in run: blocks.
Apply this to both tag-validation steps while preserving current validation behavior.
Acceptance criteria
- No direct
${{ inputs.tag }} interpolation inside shell scripts.
- Valid
vX.Y.Z tags remain accepted.
- Invalid tags and package-version mismatches remain rejected.
Update
.github/workflows/publish-pypi.ymlso manually supplied release inputs are passed to shell steps through environment variables rather than embedded directly inrun:blocks.Apply this to both tag-validation steps while preserving current validation behavior.
Acceptance criteria
${{ inputs.tag }}interpolation inside shell scripts.vX.Y.Ztags remain accepted.