From 4e02339f59ad7d5ba397462b76d9fa42537b6a61 Mon Sep 17 00:00:00 2001
From: tonym <anthonymoon61@gmail.com>
Date: Mon, 15 Jun 2026 22:41:28 -0500
Subject: [PATCH] updater: fix webhook secret template (backtick literal, not
 escaped quotes)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The -template parser is Go text/template; JSON-escaped \" broke the action.
Backtick raw-string literal is valid inside the JSON string and parses cleanly.
Config-only (mounted + hotreload) — no app rebuild.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 updater/hooks.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/updater/hooks.json b/updater/hooks.json
index dea8a56..c9dc823 100644
--- a/updater/hooks.json
+++ b/updater/hooks.json
@@ -7,7 +7,7 @@
     "trigger-rule": {
       "match": {
         "type": "value",
-        "value": "{{ getenv \"UPDATER_SECRET\" }}",
+        "value": "{{ getenv `UPDATER_SECRET` }}",
         "parameter": { "source": "header", "name": "X-Update-Token" }
       }
     }