Fixed

• Argument injection via the detect_changes range argument (#23)：the range argument was split on .. and passed directly to git diff --name-only as revisions. Because git is executed without a shell, an option-shaped piece was interpreted as a git flag: a value like --output=<path>..<rev> became git diff --name-only --output=<path> <rev>, and git's --output writes to an arbitrary file. Any range piece that is empty or starts with - is now rejected before git runs. Contributed by @Choppaaahh.