bumping-version

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The scripts/release-workflow runtime workflow reads outsider-provided free text from files specified by the user via --message-file and --changelog-file, then injects that content into the release preparation (changelog markdown and commit message files) without any “select specific item first” constraint.