{"author":"Viktor Szakats","author_email":"commit@vsz.me","author_time":1749110314,"commit_time":1749238243,"committer":"Viktor Szakats","committer_email":"commit@vsz.me","hash":"17a669426f36b467dfd945b4b35f6211598b7977","message":"CI: fix zizmor 1.9.0 warnings, shellcheck verify CI shell code, fix fallouts\n\nzizmor 1.9.0 effectively bans using GHA macros within shell script\nsnippets. Rework them to pass GHA macro values via envs and use those\nenvs in shell snippets. `${{ env.* }}` macros could be converted\nto native env references after making their names shell-compatible.\n\nEnvs and shell commands can no longer be used in GHA macro values. Most\ncases could be fixed by using literals. Passing quoted values with\nspaces combined with other args also doesn't work anymore. This was\nreplaced by passing them separately.\n\nDespite the initial complications, avoiding GHA macros in scripts does\nseems to make the CI code reasonable cleaner. It also makes it possible\nto analyze the scripts with shellcheck, finding subtle issues that went\nunnoticed till now.\n\nAlso:\n- un-ignore and fix three existing zizmor `template-injection` issues.\n- add script to extract and shellcheck all shell code stored within GHA\n  and Circle CI YAML files.\n- add CI job to run this script.\n- fix shellcheck issues discovered.\n- fix minor differences between cmake and autotools FreeBSD jobs.\n- merge cmake/autotools FreeBSD jobs to avoid developing unwanted\n  differences again.\n- fix/sync quote use across shell code.\n- replace `$HOME` with `~` or literal where it made sense.\n- replace most `brew --prefix` with literals.\n- move all curl install tests to the `curl-install*` prefix.\n- add missing curl install tests to cygwin/msys/mingw/*bsd.\n- pipe to `tar` instead of storing downloads on disk.\n- drop unnecessary `PKG_CONFIG_PATH` when building nghttp3.\n\nRef: https://github.com/curl/curl/actions/runs/15461461371/job/43523546041\nRef: https://github.com/zizmorcore/zizmor/releases/tag/v1.9.0\n\nFollow-up to e522f47986bb72f194636e155191d7dccdc2d4fc #17278\n\nCloses #17537\n","parents":["ba407ee43d609cb7ea88c0fc51728168da4e7da6"],"tree_hash":"36ccc59f0fa9149b0a9b122f6dd366e269a1aae9"}