fix(ci): harden version bump workflow

[github-actions]

Summary

• generate changelog headings with the resolved version and UTC release date
• pass commit-derived changelog and commit-message values through step-level environment bindings
• build generated Markdown with printf/echo so dynamic text is treated as data instead of shell source
• restore the malformed v1.2.2 changelog heading produced by the previous workflow logic

Security

Closes shell-injection paths in changelog generation, automated PR body creation, and merge commit-message parsing.

Validation

• workflow YAML parses successfully
• git diff --check passes
• adversarial shell payloads remain literal and are not executed

[Copilot]

Pull request overview

This PR updates the GitHub Actions version-bump workflow to generate CHANGELOG.md and the PR body without interpolating commit-derived text directly into shell source, aiming to make the automation safer and more robust.

Changes:

• Move NEW_VERSION, CHANGELOG, and related values into step-level env: and emit markdown via printf/echo instead of heredocs/envsubst.
• Simplify CHANGELOG.md update logic by removing the temporary new_entry.md file.
• Keep the merge-tag job’s commit-message handling out of shell source by binding COMMIT_MESSAGE via env:.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

🔍 CI Quality Gates Summary

Overall Status: ✅ All Passed

Check	Status	Details	Action Required
🎨 Format	✅ Passed	ruff format check	None
🔧 Lint	✅ Passed	ruff linting	None
📝 Types	✅ Passed	mypy type checking	None
🧪 Tests	✅ Passed	Unit tests	None
📊 Coverage	81.8%	Minimum: 80%	None
🔌 MCP	✅ Valid	Protocol compliance	None
🔒 Security	✅ Clean	Dependency audit	None

🔗 Quick Links

• View detailed analysis
• See workflow logs

🛠️ Quick Fix Commands

# Fix most issues automatically
ruff format .
ruff check . --fix

# Run tests locally
pytest tests/unit/ --cov=markitdown_mcp

# Check types
mypy markitdown_mcp

---

Last updated: 2026-08-24 22:44:56 UTC

[github-actions]

🔍 PR Quality Summary

CI Status

✅ Quality: success
✅ Security: success

Metrics

Metric	Value	Trend
📊 Coverage	N/A	-
🧪 Tests	Test results unavailable	-
⏱️ Performance	No performance data	-

Quality Checks

• Format & Lint: Ruff formatting and linting
• Type Safety: MyPy strict type checking
• Security: Bandit, Safety, GitLeaks scanning
• MCP Protocol: Tool schema validation
• Documentation: Docstring coverage (80%+)

MCP Tools

• convert_file - Convert individual files to Markdown
• convert_directory - Batch convert directories
• list_supported_formats - Query supported file types

---

_{🤖 Auto-generated by CI • Last updated: 2026-08-24 22:45 UTC}