Quote variables

Co-authored-by: Bryce Mecum <petridish@gmail.com>

Author: kou

dev/release/post-05-update-gh-release-notes.sh

@@ -36,7 +36,7 @@ WORKFLOW="release.yml"
 
 # Wait for the GitHub Workflow that creates the GitHub Release
 # to finish before updating the release notes.
-$SOURCE_DIR/utils-watch-gh-workflow.sh ${TAG} ${WORKFLOW}
+"$SOURCE_DIR/utils-watch-gh-workflow.sh" "${TAG}" "${WORKFLOW}"
 
 # Update the Release Notes section
 RELEASE_NOTES_URL="https://arrow.apache.org/release/${VERSION}.html"

dev/release/utils-env.sh

@@ -25,5 +25,5 @@ if [ ! -f "${SOURCE_DIR}/.env" ]; then
   exit 1
 fi
 # shellcheck source=SCRIPTDIR/.env.example
-. ${SOURCE_DIR}/.env
+. "${SOURCE_DIR}/.env"
 export GH_TOKEN