fix: correct regex syntax in governance hook for linked-issues detection

.github/workflows/gitleaks-update.yml

@@ -5,7 +5,7 @@ name: gitleaks version updater
 
 on:
   schedule:
-    - cron: '17 3 * * 1'
+    - cron: "17 3 * * 1"
   workflow_dispatch:
 
 permissions:

CHANGELOG.md

@@ -33,6 +33,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Deprecated
 
 (none identified)
+
 ### Added
 
 - **Gitleaks secret scanning** — Added `gitleaks-reusable.yml`, an organisation-wide reusable workflow other repositories call via `workflow_call`, plus a `gitleaks.yml` caller running on pull requests into `develop`/`main`. Runs the open-source Gitleaks CLI directly (the `gitleaks-action` wrapper requires a paid licence for organisation repositories). Per-PR runs scan the working tree; `workflow_dispatch` accepts a `full-history` input for on-demand full-history rescans. A baseline full-history scan of this repository returned 50 hits, all verified as placeholder values in documentation and tests, allowlisted in `.gitleaks.toml`. ([PR #1444](https://github.com/lightspeedwp/.github/pull/1444))

hooks/pr-merge-governance-validator.sh

@@ -99,7 +99,7 @@ esac
 
 has_linked_issues=false
 
-if echo "$pr_body" | grep -qiE "(fixes|resolves|closes|relates to)\s+#[0-9]+"; then
+if echo "$pr_body" | grep -qiE "(^|[[:space:]])(fixes|resolves|closes|relates[[:space:]]+to)[[:space:]]+#[0-9]+"; then
   has_linked_issues=true
 fi