@@ -5,7 +5,7 @@ variables:
   - name: IsStableBuild
     value: ${{ or(eq(variables['Build.SourceBranch'], 'refs/heads/main'), startsWith(variables['Build.SourceBranch'], 'refs/heads/release-')) }}
   - name: IsNightlyBuild
-    value: ${{ and(eq(variables['Build.Reason'], 'Schedule'), eq(variables['Build.SourceBranch'], 'refs/heads/develop')) }}
+    value: ${{ and(eq(variables['Build.Reason'], 'Schedule'), or(eq(variables['Build.SourceBranch'], 'refs/heads/develop'), eq(variables['Build.SourceBranch'], 'refs/heads/develop.next'))) }}
   - name: DoRealSign
     value: ${{ or(eq(parameters.ForceRealSign, true), eq(variables['IsStableBuild'], true), eq(variables['IsNightlyBuild'], true)) }}
   - name: DoProceedToRelease
@@ -45,21 +45,24 @@ trigger:
   branches:
     include:
       - main
-      - develop
       - release-*
+      - develop
+      - develop.next
       - develop.eclipse
 
 pr:
   - main
-  - develop
   - release-*
+  - develop
+  - develop.next
 
 schedules:
   - cron: "0 22 * * 0-4" # 6:00 Mon-Fri UTC+8
     displayName: "Nightly build"
     branches:
       include:
         - develop
+        - develop.next
     always: true
 
 extends:
 
@@ -3,6 +3,7 @@
 All notable changes to "Azure Toolkit for IntelliJ IDEA" will be documented in this file.
 
 - [Change Log](#change-log)
+  - [3.97.5](#3975)
   - [3.97.4](#3974)
   - [3.97.3](#3973)
   - [3.97.2](#3972)
@@ -124,11 +125,18 @@ All notable changes to "Azure Toolkit for IntelliJ IDEA" will be documented in t
   - [3.0.7](#307)
   - [3.0.6](#306)
 
+## 3.97.5
+### Added
+- Enable Azure Skills for GitHub Copilot.
+
+### Fixed
+- Fixed zip entry path check.
+- Fixed screen reader not reading the new status after selecting subscription with keyboard.
+
 ## 3.97.4
 - Update prompts and tool references of GitHub Copilot modernization.
 
 ## 3.97.3
-- Support IntelliJ IDEA 2026.1 EAP
 - Rename GitHub Copilot app modernization to GitHub Copilot modernization.
 
 ## 3.97.2
 
@@ -27,7 +27,7 @@
   <parent>
     <groupId>com.microsoft.azuretools</groupId>
     <artifactId>utils</artifactId>
-    <version>3.97.4</version>
+    <version>3.97.5</version>
   </parent>
   <groupId>com.microsoft.azuretools</groupId>
   <artifactId>com.microsoft.azuretools.sdk.lib</artifactId>
@@ -39,7 +39,7 @@
   </organization>
 
   <properties>
-    <azuretool.version>3.97.4</azuretool.version>
+    <azuretool.version>3.97.5</azuretool.version>
     <azuretool.sdk.version>3.32.0.qualifier</azuretool.sdk.version>
     <azure.toolkit-lib.version>0.52.2</azure.toolkit-lib.version>
   </properties>
 
@@ -143,8 +143,14 @@ private void extractZip(File zipFile, File destDir) throws IOException {
             java.util.zip.ZipEntry zipEntry;
             while ((zipEntry = zis.getNextEntry()) != null) {
                 final File outputFile = new File(destDir, zipEntry.getName());
+                // ensure the zip entry is within the destination directory
+                if (!outputFile.getCanonicalPath().startsWith(destDir.getCanonicalPath() + File.separator)) {
+                    throw new IOException("Bad zip entry - " + zipEntry.getName());
+                }
                 if (zipEntry.isDirectory()) {
-                    if (!outputFile.exists()) outputFile.mkdirs();
+                    if (!outputFile.exists()) {
+                        outputFile.mkdirs();
+                    }
                 } else {
                     if (!outputFile.getParentFile().exists()) outputFile.getParentFile().mkdirs();
                     try (final FileOutputStream fos = new FileOutputStream(outputFile)) {