Fix critical safety and correctness issues in release.sh

[rauldsl]

Description of Problem:

This PR fixes a few critical issues in release.sh that could lead to incorrect behavior or unsafe execution paths during release operations.

Main issues addressed:

• Unsafe dynamic function call via increment_on_$1
• Incorrect argument validation in bump_release()
• Potential word-splitting issues in apply_triplets_to_file()

---

OpenSCAP Version:

main

---

Operating System & Version:

macOS / Linux (shell script portability affected)

---

Steps to Reproduce:

1. Run release.sh with invalid strategy argument
2. Attempt LT version bump process
3. Observe incorrect or unsafe execution paths

---

Actual Results:

• Script may attempt to execute undefined functions dynamically
• Incorrect argument validation behavior
• Risk of silent parsing issues in array handling

---

Expected Results:

• Strict validation of LT versioning strategy
• Safe and explicit control flow for version increments
• Robust array handling without word-splitting issues

---

Additional Information / Debugging Steps:

Validated with:

• bash -n
• manual inspection of release flow logic

No functional changes intended for valid execution paths.

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud