From ee52ceb1ecf16b317ccd08dedf3678f66657b193 Mon Sep 17 00:00:00 2001
From: Zixuan Chen <remch183@outlook.com>
Date: Thu, 22 Oct 2026 23:08:03 +0800
Subject: [PATCH] fix: pass release PR bodies through the environment

Keep Markdown backticks and shell substitutions in PR prose from executing in the release-flags step.
---
 .github/workflows/publish-crates.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/publish-crates.yml b/.github/workflows/publish-crates.yml
index d5b405a0b..5b88fa982 100644
--- a/.github/workflows/publish-crates.yml
+++ b/.github/workflows/publish-crates.yml
@@ -19,8 +19,9 @@ jobs:
 
       - name: Extract release flags
         id: extract_flags
+        env:
+          PR_BODY: ${{ github.event.pull_request.body }}
         run: |
-          PR_BODY="${{ github.event.pull_request.body }}"
           EXCLUDED_FLAGS=$(echo "$PR_BODY" | grep -o '<!-- RELEASE_FLAGS: .* -->' | sed 's/<!-- RELEASE_FLAGS: \(.*\) -->/\1/')
           echo "EXCLUDED_FLAGS=$EXCLUDED_FLAGS" >> $GITHUB_OUTPUT