Fix ConPtyShell.ps1 auth bypass (GHSA-6m5c-fv2q-jrj2) #130

	name: ci

	# Fast pre-merge gate: formatting, go vet, and the network-free unit tests.
	# Runs on every pull request and on pushes to main. Heavier suites (full unit
	# tests with network, integration, gosec) stay on-demand / release-time.
	on:
	push:
	branches:
	- main
	pull_request:

	permissions:
	contents: read

	jobs:
	check:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
	with:
	persist-credentials: false

	- name: Set up Go
	uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
	with:
	go-version: 1.26

	- name: Format & vet
	run: make check

	- name: Unit tests (no network)
	run: make run-unit-no-network

Provide feedback