*: fix potential code injection

[KaloyanTanev]

As per the title

category: bug
ticket: none

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.60%. Comparing base (cd96ee2) to head (c3c93f7).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4598      +/-   ##
==========================================
+ Coverage   57.58%   57.60%   +0.01%     
==========================================
  Files         246      246              
  Lines       33675    33675              
==========================================
+ Hits        19392    19397       +5     
  Misses      11843    11843              
+ Partials     2440     2435       -5     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Updates the patch-release GitHub Actions workflows to reduce the risk of expression/input-driven shell injection when propagating the target_minor workflow input into bash scripts.

Changes:

• Pass inputs.target_minor via a step env variable (TARGET_MINOR_INPUT) instead of interpolating the expression directly inside the run: script.
• Update the bash assignment to use TARGET_MINOR="$TARGET_MINOR_INPUT" across patch-release steps 1–4.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File	Description
.github/workflows/patch-release-step1.yml	Routes target_minor through env before using it in the version bump script to reduce injection risk.
.github/workflows/patch-release-step2.yml	Routes target_minor through env before using it in the branch selection logic to reduce injection risk.
.github/workflows/patch-release-step3.yml	Routes target_minor through env before using it in the branch selection logic to reduce injection risk.
.github/workflows/patch-release-step4.yml	Routes target_minor through env before using it in the branch selection logic to reduce injection risk.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.