scripts: template json safely

Signed-off-by: hasheddan <[email protected]>

Author: hasheddan

anago

@@ -1133,15 +1133,26 @@ update_github_release () {
   # post release data
   logecho "$release_verb the $RELEASE_VERSION_PRIME release on github..."
   local changelog_url="$K8S_GITHUB_URL/blob/master/$CHANGELOG_FILE"
-  release_id=$($GHCURL $K8S_GITHUB_API/releases$id_suffix --data \
-   '{
-    "tag_name": "'$RELEASE_VERSION_PRIME'",
-    "target_commitish": "'$RELEASE_BRANCH'",
-    "name": "'$RELEASE_VERSION_PRIME'",
-    "body": "See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce) and ['$CHANGELOG_FILE']('$changelog_url'#'${RELEASE_VERSION_PRIME//\./}') for details.\n\nSHA256 for `kubernetes.tar.gz`: `'${sha256_hash}'`\n\nSHA512 for `kubernetes.tar.gz`: `'${sha512_hash}'`\n\nAdditional binary downloads are linked in the ['$CHANGELOG_FILE']('$changelog_url'#downloads-for-'${RELEASE_VERSION_PRIME//\./}').",
-    "draft": '$draft',
-    "prerelease": '$prerelease'
-    }' |jq -r '.id')
+  query_tmpl='{
+    "tag_name" : $tag,
+    "target_commitish": $target,
+    "name": $name,
+    "body": $body,
+    "draft": $draft,
+    "prerelease": $prerelease
+  }'
+  body='See [kubernetes-announce@](https://groups.google.com/forum/#!forum/kubernetes-announce) and ['${CHANGELOG_FILE}']('${changelog_url}'#'${RELEASE_VERSION_PRIME//\./}') for details.\n\nSHA256 for `kubernetes.tar.gz`: `'${sha256_hash}'`\n\nSHA512 for `kubernetes.tar.gz`: `'${sha512_hash}'`\n\nAdditional binary downloads are linked in the ['${CHANGELOG_FILE}']('${changelog_url}'#downloads-for-'${RELEASE_VERSION_PRIME//\./}').'
+  query_body="$( jq \
+    --arg tag "$RELEASE_VERSION_PRIME" \
+    --arg target "$RELEASE_BRANCH" \
+    --arg name "$RELEASE_VERSION_PRIME" \
+    --arg body "$body" \
+    --arg draft "$draft" \
+    --arg prerelease "$prerelease" \
+    -c -n "$query_tmpl" \
+  )"
+  release_id=$($GHCURL $K8S_GITHUB_API/releases$id_suffix --data "$query_body" \
+    |jq -r '.id')
 
   # verify it was created
   if [[ -z "$release_id" ]]; then