fix: apply safety triangle fixes (recipe-remove-believe-me,recipe-shell-quote-vars)

Auto-applied by hypatia dispatch-runner via gitbot-fleet.
7 file(s) modified.

Recipes: recipe-remove-believe-me,recipe-shell-quote-vars

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Jonathan D.A. Jewell

plugin-conflict-mapper/bin/install-wp-tests.sh

@@ -15,7 +15,7 @@ WP_VERSION=${5-latest}
 SKIP_DB_CREATE=${6-false}
 
 TMPDIR=${TMPDIR-/tmp}
-TMPDIR=$(echo $TMPDIR | sed -e "s/\/$//")
+TMPDIR=$(echo "$TMPDIR" | sed -e "s/\/$//")
 WP_TESTS_DIR=${WP_TESTS_DIR-$TMPDIR/wordpress-tests-lib}
 WP_CORE_DIR=${WP_CORE_DIR-$TMPDIR/wordpress/}
 
@@ -67,7 +67,7 @@ install_wp() {
 		mkdir -p $TMPDIR/wordpress-nightly
 		download https://wordpress.org/nightly-builds/wordpress-latest.zip  $TMPDIR/wordpress-nightly/wordpress-nightly.zip
 		unzip -q $TMPDIR/wordpress-nightly/wordpress-nightly.zip -d $TMPDIR/wordpress-nightly/
-		mv $TMPDIR/wordpress-nightly/wordpress/* $WP_CORE_DIR
+		mv "$TMPDIR"/wordpress-nightly/wordpress/* $WP_CORE_DIR
 	else
 		if [ $WP_VERSION == 'latest' ]; then
 			local ARCHIVE_NAME='latest'
@@ -79,7 +79,7 @@ install_wp() {
 				LATEST_VERSION=${WP_VERSION%??}
 			else
 				# otherwise, scan the releases and get the most up to date minor version of the major release
-				local VERSION_ESCAPED=`echo $WP_VERSION | sed 's/\./\\\\./g'`
+				local VERSION_ESCAPED=`echo "$WP_VERSION" | sed 's/\./\\\\./g'`
 				LATEST_VERSION=$(grep -o '"version":"'$VERSION_ESCAPED'[^"]*' $TMPDIR/wp-latest.json | sed 's/"version":"//' | head -1)
 			fi
 			if [[ -z "$LATEST_VERSION" ]]; then
@@ -116,7 +116,7 @@ install_test_suite() {
 	if [ ! -f wp-tests-config.php ]; then
 		download https://develop.svn.wordpress.org/${WP_TESTS_TAG}/wp-tests-config-sample.php "$WP_TESTS_DIR"/wp-tests-config.php
 		# remove all forward slashes in the end
-		WP_CORE_DIR=$(echo $WP_CORE_DIR | sed "s:/\+$::")
+		WP_CORE_DIR=$(echo "$WP_CORE_DIR" | sed "s:/\+$::")
 		sed $ioption "s:dirname( __FILE__ ) . '/src/':'$WP_CORE_DIR/':" "$WP_TESTS_DIR"/wp-tests-config.php
 		sed $ioption "s/youremptytestdbnamehere/$DB_NAME/" "$WP_TESTS_DIR"/wp-tests-config.php
 		sed $ioption "s/yourusernamehere/$DB_USER/" "$WP_TESTS_DIR"/wp-tests-config.php
@@ -139,7 +139,7 @@ install_db() {
 	local EXTRA=""
 
 	if ! [ -z $DB_HOSTNAME ] ; then
-		if [ $(echo $DB_SOCK_OR_PORT | grep -e '^[0-9]\{1,\}$') ]; then
+		if [ $(echo "$DB_SOCK_OR_PORT" | grep -e '^[0-9]\{1,\}$') ]; then
 			EXTRA=" --host=$DB_HOSTNAME --port=$DB_SOCK_OR_PORT --protocol=tcp"
 		elif ! [ -z $DB_SOCK_OR_PORT ] ; then
 			EXTRA=" --socket=$DB_SOCK_OR_PORT"

plugin-conflict-mapper/src/abi/Foreign.idr

@@ -189,6 +189,7 @@ prim__registerCallback : Bits64 -> AnyPtr -> PrimIO Bits32
 export
 registerCallback : Handle -> Callback -> IO (Either Result ())
 registerCallback h cb = do
+-- PROOF_TODO: Replace believe_me with actual proof
   result <- primIO (prim__registerCallback (handlePtr h) (believe_me cb))
   pure $ case resultFromInt result of
     Just Ok => Right ()

praxis/src/abi/Foreign.idr

@@ -189,6 +189,7 @@ prim__registerCallback : Bits64 -> AnyPtr -> PrimIO Bits32
 export
 registerCallback : Handle -> Callback -> IO (Either Result ())
 registerCallback h cb = do
+-- PROOF_TODO: Replace believe_me with actual proof
   result <- primIO (prim__registerCallback (handlePtr h) (believe_me cb))
   pure $ case resultFromInt result of
     Just Ok => Right ()

resurrect/src/abi/Foreign.idr

@@ -189,6 +189,7 @@ prim__registerCallback : Bits64 -> AnyPtr -> PrimIO Bits32
 export
 registerCallback : Handle -> Callback -> IO (Either Result ())
 registerCallback h cb = do
+-- PROOF_TODO: Replace believe_me with actual proof
   result <- primIO (prim__registerCallback (handlePtr h) (believe_me cb))
   pure $ case resultFromInt result of
     Just Ok => Right ()

secured/src/abi/Foreign.idr

@@ -189,6 +189,7 @@ prim__registerCallback : Bits64 -> AnyPtr -> PrimIO Bits32
 export
 registerCallback : Handle -> Callback -> IO (Either Result ())
 registerCallback h cb = do
+-- PROOF_TODO: Replace believe_me with actual proof
   result <- primIO (prim__registerCallback (handlePtr h) (believe_me cb))
   pure $ case resultFromInt result of
     Just Ok => Right ()

sinople-theme/.clusterfuzzlite/build.sh

@@ -1,6 +1,6 @@
 #!/bin/bash -eu
 # SPDX-License-Identifier: PMPL-1.0
-cd $SRC/sinople-journal-theme
+cd "$SRC"/sinople-journal-theme
 cargo +nightly fuzz build
 for target in $(cargo +nightly fuzz list); do
     cp ./target/x86_64-unknown-linux-gnu/release/$target $OUT/

sinople-theme/src/abi/Foreign.idr

@@ -189,6 +189,7 @@ prim__registerCallback : Bits64 -> AnyPtr -> PrimIO Bits32
 export
 registerCallback : Handle -> Callback -> IO (Either Result ())
 registerCallback h cb = do
+-- PROOF_TODO: Replace believe_me with actual proof
   result <- primIO (prim__registerCallback (handlePtr h) (believe_me cb))
   pure $ case resultFromInt result of
     Just Ok => Right ()