@@ -1920,7 +1920,7 @@
     "matchedBy": "official-repository-asset",
     "homepage": "https://www.tripo3d.ai",
     "mimeType": "image/png",
-    "sha256": "60f06a7443bb74f962c3095e6c63bb68b76c4d345c3e7cf2e22831720e080d1f",
+    "sha256": "a85e05cad881498c048a4ce6bcef99b6eb3bcb89172d446a577207102f55057b",
     "transformation": "Solid background, 512x512 PNG; no baked corner radius"
   },
   {
 
@@ -67,7 +67,7 @@
         "en": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",
         "zh-CN": "基于 GitHub CLI 的 GitHub 工作流，覆盖提交、Pull Request、Issue、Release、Actions、仓库、Codespaces 等资源。"
       },
-      "version": "0.1.2",
+      "version": "0.1.3",
       "author": {
         "name": "Z.ai",
         "url": "https://z.ai"
 
@@ -1,6 +1,6 @@
 {
   "name": "github",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",
   "description_i18n": {
     "en": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",
 
@@ -1,6 +1,6 @@
 {
   "name": "github",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",
   "description_i18n": {
     "en": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",
 
@@ -96,6 +96,9 @@ def parse_quoted_value(raw: str, quote: str, line_number: int) -> str:
 
 def parse_dotenv(text: str) -> list[tuple[str, str]]:
     entries: list[tuple[str, str]] = []
+    # GitHub stores secret names as uppercase and treats lookups as
+    # case-insensitive. Track that canonical form so a dotenv file cannot
+    # submit the same remote secret twice under differently-cased names.
     seen: set[str] = set()
 
     for line_number, source_line in enumerate(text.splitlines(), start=1):
@@ -116,7 +119,8 @@ def parse_dotenv(text: str) -> list[tuple[str, str]]:
             raise DotenvError(f"line {line_number}: invalid secret name")
         if key.upper().startswith("GITHUB_"):
             raise DotenvError(f"line {line_number}: GITHUB_ names are reserved")
-        if key in seen:
+        canonical_key = key.upper()
+        if canonical_key in seen:
             raise DotenvError(f"line {line_number}: duplicate secret name {key}")
 
         raw_value = raw_value.lstrip()
@@ -126,7 +130,7 @@ def parse_dotenv(text: str) -> list[tuple[str, str]]:
             value = split_unquoted_value(raw_value)
 
         entries.append((key, value))
-        seen.add(key)
+        seen.add(canonical_key)
 
     if not entries:
         raise DotenvError("secret file contains no KEY=VALUE entries")
 
@@ -1,4 +1,5 @@
 import hashlib
+import io
 import json
 import re
 import tempfile
@@ -44,7 +45,6 @@ def test_zcode_and_compatibility_manifests_match(self) -> None:
 
         self.assertEqual(zcode_manifest, claude_manifest)
         self.assertEqual(zcode_manifest["name"], "github")
-        self.assertEqual(zcode_manifest["version"], "0.1.2")
         self.assertEqual(
             zcode_manifest["author"],
             {"name": "Z.ai", "url": "https://z.ai"},
@@ -247,6 +247,33 @@ def test_secret_sync_rejects_ambiguous_or_unsafe_files(self) -> None:
             with self.assertRaises(secret_sync.DotenvError):
                 secret_sync.read_regular_file(str(link))
 
+    def test_secret_sync_rejects_case_insensitive_duplicates_before_submission(self) -> None:
+        secret_sync = load_secret_sync_module()
+        dotenv = "TOKEN=first\ntoken=second\n"
+
+        with self.assertRaisesRegex(secret_sync.DotenvError, "duplicate secret name token"):
+            secret_sync.parse_dotenv(dotenv)
+
+        with tempfile.TemporaryDirectory() as directory:
+            path = Path(directory) / "secrets.env"
+            path.write_text(dotenv, encoding="utf-8")
+            for action in ("preview", "apply"):
+                argv = ["secret_sync.py", action, "--file", str(path)]
+                if action == "apply":
+                    argv.extend([
+                        "--repo", "example/repo",
+                        "--expect-sha256", secret_sync.content_sha256(dotenv),
+                    ])
+                with (
+                    self.subTest(action=action),
+                    mock.patch("sys.argv", argv),
+                    mock.patch("sys.stderr", new_callable=io.StringIO) as stderr,
+                    mock.patch.object(secret_sync.subprocess, "run") as run,
+                ):
+                    self.assertEqual(secret_sync.main(), 2)
+                    self.assertIn("duplicate secret name token", stderr.getvalue())
+                    run.assert_not_called()
+
     def test_secret_sync_digest_binds_preview_to_apply(self) -> None:
         secret_sync = load_secret_sync_module()
         original = "TOKEN=first\n"
Original file line number	Diff line number	Diff line change
`@@ -1920,7 +1920,7 @@`
`1920`	`1920`	`"matchedBy": "official-repository-asset",`
`1921`	`1921`	`"homepage": "https://www.tripo3d.ai",`
`1922`	`1922`	`"mimeType": "image/png",`
`1923`		`- "sha256": "60f06a7443bb74f962c3095e6c63bb68b76c4d345c3e7cf2e22831720e080d1f",`
	`1923`	`+ "sha256": "a85e05cad881498c048a4ce6bcef99b6eb3bcb89172d446a577207102f55057b",`
`1924`	`1924`	`"transformation": "Solid background, 512x512 PNG; no baked corner radius"`
`1925`	`1925`	`},`
`1926`	`1926`	`{`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "github",`
`3`		`- "version": "0.1.2",`
	`3`	`+ "version": "0.1.3",`
`4`	`4`	`"description": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",`
`5`	`5`	`"description_i18n": {`
`6`	`6`	`"en": "GitHub CLI workflows for commits, pull requests, issues, releases, Actions, repositories, Codespaces, and other GitHub resources.",`