Apply suggestions from code review

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: data-douser

.github/workflows/release-codeql.yml

@@ -124,22 +124,25 @@ jobs:
         run: echo "⏭️ CodeQL pack publishing disabled via workflow input"
 
       - name: CodeQL - Bundle CodeQL packs
+        env:
+          PUBLISHABLE_PACKS_LIST: |
+            javascript/frameworks/cap/src
+            javascript/frameworks/cap/ext
+            javascript/frameworks/cap/lib
+            javascript/frameworks/ui5/src
+            javascript/frameworks/ui5/ext
+            javascript/frameworks/ui5/lib
+            javascript/frameworks/xsjs/src
+            javascript/frameworks/xsjs/ext
+            javascript/frameworks/xsjs/lib
+            javascript/heuristic-models/ext
         run: |
           mkdir -p dist-packs
 
           # Bundle all publishable packs
-          PUBLISHABLE_PACKS=(
-            "javascript/frameworks/cap/src"
-            "javascript/frameworks/cap/ext"
-            "javascript/frameworks/cap/lib"
-            "javascript/frameworks/ui5/src"
-            "javascript/frameworks/ui5/ext"
-            "javascript/frameworks/ui5/lib"
-            "javascript/frameworks/xsjs/src"
-            "javascript/frameworks/xsjs/ext"
-            "javascript/frameworks/xsjs/lib"
-            "javascript/heuristic-models/ext"
-          )
+          # Read the pack list from the environment into a Bash array.
+          # Each line in PUBLISHABLE_PACKS_LIST becomes one element.
+          mapfile -t PUBLISHABLE_PACKS <<< "${PUBLISHABLE_PACKS_LIST}"
 
           echo "Bundling CodeQL packs..."
           for pack_dir in "${PUBLISHABLE_PACKS[@]}"; do

scripts/update-release-version.sh

@@ -195,9 +195,9 @@ update_internal_deps() {
   local old_version="$2"
   local new_version="$3"
 
-  # Escape regex metacharacters in the old version (e.g., '.' -> '\.')
+  # Escape dots in the old version (e.g., '2.3.0' -> '2\.3\.0') for use in sed regex
   local escaped_old_version
-  escaped_old_version=$(printf '%s' "${old_version}" | sed 's/[.\*\[\^\$]/\\&/g')
+  escaped_old_version=$(printf '%s' "${old_version}" | sed 's/\./\\./g')
 
   for pack_name in "${INTERNAL_PACKS[@]}"; do
     # Update quoted caret-prefixed versions: "^X.Y.Z"