- I kept the change focused and avoided unrelated refactors.
- I added or updated tests for behavior changes.
- I updated README, docs, generated references, action examples, or plugin guidance when public behavior changed.
- I avoided committing secrets, credentials, private logs, or sensitive fixture data.
- I considered whether this has security impact and used private reporting for sensitive vulnerabilities.