chore: update Linear Release to v0.18.0

.github/workflows/linear-release.yml

@@ -30,12 +30,12 @@ jobs:
       # Fail-closed mirror: a Linear outage fails this workflow so post-merge
       # verification and the normal workflow alerting surface the interruption.
       #
-      # Official Linear action, pinned to the release commit of v0.17.2, with
+      # Official Linear action, pinned to the release commit of v0.18.0, with
       # the CLI version selected explicitly. The installer verifies the
       # downloaded CLI against a published SHA-256 checksum before executing it.
       - name: Create Linear release with the official action
         id: linear_release
-        uses: linear/linear-release-action@53ad0f863963e7f8e270fba18426bbb55ef55384 # v0.17.2
+        uses: linear/linear-release-action@d4af10092984f9bc6d5efa075b242bdf01333463 # v0.18.0
         with:
           access_key: ${{ secrets.LINEAR_ACCESS_KEY }}
-          cli_version: v0.17.2
+          cli_version: v0.18.0

CHANGELOG.md

@@ -16,6 +16,11 @@ presentation rule this organization applies to text meant for people
 
 ### Fixed
 
+- Atualizadas a Action oficial Linear Release e a CLI para v0.18.0 no workflow
+  local e nos dois starter workflows, com pin por SHA completo e versão da CLI
+  explícita. A atualização incorpora a correção upstream na execução dos comandos
+  Git e mantém o comportamento padrão de identificação das issues.
+
 - Corrigida a dependência transitiva Sharp afetada por GHSA-rgj7-g3m4-5g8c com
   a configuração oficial `overrides` do npm, limitada ao Miniflare. O lockfile
   foi regenerado pelo npm, preservando os gates de segurança existentes.

README.md

@@ -19,7 +19,7 @@ This repository hosts the **organization profile** rendered at <https://github.c
 - Dependabot checks GitHub Actions and npm every day at 05h (UTC−03:00), including weekends, groups minor and patch version updates and security updates separately per ecosystem, and automatically rebases its pull requests. Official Actions under `actions/*` and `github/*` are evaluated immediately; third-party GitHub Actions and npm apply a seven-day cooldown to ordinary version updates. The cooldown does not apply to security updates.
 - The Pages workflow uses GitHub's official Pages Actions and includes the public-site formatting, npm provenance-signature, and advisory checks in its artifact build.
 - CodeQL runs through GitHub's code scanning default setup, without a workflow file. Dependency Review, Zizmor, and OpenSSF Scorecard invoke their official Actions directly, pinned by full commit SHA. Repository-owned SARIF gates, policy manifests, lockfiles, workflow-contract validators, and scanner wrappers are intentionally absent.
-- Linear Release uses Linear's official Action, pinned to the immutable commit of `v0.17.2`, to mirror every `main` commit into the continuous `.github-org` pipeline. This does not introduce a numbered artifact or an organization-wide controller; it records only this repository's own releases. The upstream installer verifies the downloaded CLI against a published SHA-256 checksum before executing it.
+- Linear Release uses Linear's official Action, pinned to the immutable commit of `v0.18.0`, to mirror every `main` commit into the continuous `.github-org` pipeline. This does not introduce a numbered artifact or an organization-wide controller; it records only this repository's own releases. The upstream installer verifies the downloaded CLI against a published SHA-256 checksum before executing it.
 - Pull requests reach `main` only through squash, under the Enterprise rulesets. Dependabot pull requests receive GitHub's native auto-merge from `.github/workflows/dependabot-auto-merge.yml`, a repository-local workflow that runs no Action and uses a fine-grained personal access token stored as the Dependabot secret `DEPENDABOT_AUTOMERGE_TOKEN`; GitHub performs the merge only once every rule and check is satisfied. There is no merge queue, GitHub App, or organization-wide controller.
 - Per-repository community health files (e.g. `CONTRIBUTING.md`, `SECURITY.md`, `CODE_OF_CONDUCT.md`) defined here apply org-wide unless the individual repository overrides them.
 

workflow-templates/linear-release-after-deploy.yml

@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0 # Full history: the CLI scans commits since the last release.
           persist-credentials: false
 
-      # Linear's official action, pinned to the full-length SHA of v0.17.2. The
+      # Linear's official action, pinned to the full-length SHA of v0.18.0. The
       # CLI version is selected explicitly so a future rebuild of the action
       # cannot change the tool that runs. The installer verifies the downloaded
       # CLI against a published SHA-256 checksum before executing it.
@@ -65,7 +65,7 @@ jobs:
       # red instead of hiding a divergence between GitHub and Linear.
       - name: Create Linear release with the official action
         id: linear_release
-        uses: linear/linear-release-action@53ad0f863963e7f8e270fba18426bbb55ef55384 # v0.17.2
+        uses: linear/linear-release-action@d4af10092984f9bc6d5efa075b242bdf01333463 # v0.18.0
         with:
           access_key: ${{ secrets.LINEAR_ACCESS_KEY }}
-          cli_version: v0.17.2
+          cli_version: v0.18.0

workflow-templates/linear-release.yml

@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 0 # Full history: the CLI scans commits since the last release.
           persist-credentials: false
 
-      # Linear's official action, pinned to the full-length SHA of v0.17.2. The
+      # Linear's official action, pinned to the full-length SHA of v0.18.0. The
       # CLI version is selected explicitly so a future rebuild of the action
       # cannot change the tool that runs. The installer verifies the downloaded
       # CLI against a published SHA-256 checksum before executing it.
@@ -51,7 +51,7 @@ jobs:
       # red instead of hiding a divergence between GitHub and Linear.
       - name: Create Linear release with the official action
         id: linear_release
-        uses: linear/linear-release-action@53ad0f863963e7f8e270fba18426bbb55ef55384 # v0.17.2
+        uses: linear/linear-release-action@d4af10092984f9bc6d5efa075b242bdf01333463 # v0.18.0
         with:
           access_key: ${{ secrets.LINEAR_ACCESS_KEY }}
-          cli_version: v0.17.2
+          cli_version: v0.18.0