From b80c7ce148f357e7e31c6fc3653ff63cc1872364 Mon Sep 17 00:00:00 2001
From: Boshen <boshenc@gmail.com>
Date: Mon, 10 Feb 2025 14:41:54 +0800
Subject: [PATCH] ci: fix zizmor template-injection warning

---
 .github/workflows/release-plz.yml | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml
index 19897687..ee7e3491 100644
--- a/.github/workflows/release-plz.yml
+++ b/.github/workflows/release-plz.yml
@@ -32,18 +32,15 @@ jobs:
         if: ${{ steps.release-plz.outputs.prs_created }}
         env:
           GH_TOKEN: ${{ secrets.OXC_BOT_PAT }}
+          PR_NUMBER: ${{ fromJSON(steps.release-plz.outputs.pr).number }}
+          VERSION: ${{ fromJSON(steps.release-plz.outputs.pr).releases[0].version }}
         run: |
           set -e
-
-          pr_number=${{ fromJSON(steps.release-plz.outputs.pr).number }}
-          if [[ -n "$pr_number" ]]; then
-            version=${{ fromJSON(steps.release-plz.outputs.pr).releases[0].version }}
-            echo "version: $version"
-
-            jq --arg version "${version}" '.version = ($version)' npm/package.json > tmp
+          if [[ -n "$PR_NUMBER" ]]; then
+            jq --arg version "${VERSION}" '.version = ($VERSION)' npm/package.json > tmp
             mv tmp npm/package.json
 
-            gh pr checkout $pr_number
+            gh pr checkout $PR_NUMBER
             git add .
             git commit --amend --no-edit
             git push --force-with-lease