hack: unquoted ${YAML_OUTPUT_DIR} in rm command is a word-splitting risk

[Ankitsinghsisodya]

Problem

In hack/generate-yamls.sh line 48, ${YAML_OUTPUT_DIR} is used unquoted in the rm -fr command:

rm -fr ${YAML_OUTPUT_DIR}/*.yaml

If the path stored in YAML_OUTPUT_DIR contains spaces or special characters, the shell performs word-splitting and glob-expansion on the unquoted variable, which can cause the command to delete files in the wrong locations or fail silently.

Proposed Fix

rm -fr "${YAML_OUTPUT_DIR}"/*.yaml

This is consistent with how the variable is used elsewhere in the same script (e.g. "${EVENTING_CORE_YAML}").

[Ankitsinghsisodya]

/assign

[github-actions]

This issue is stale because it has been open for 90 days with no
activity. It will automatically close after 30 more days of
inactivity. Reopen the issue with /reopen. Mark the issue as
fresh by adding the comment /remove-lifecycle stale.