Bump senzing-factory/build-resources/.github/workflows/add-to-project.yaml from 3 to 4

[dependabot]

Bumps senzing-factory/build-resources/.github/workflows/add-to-project.yaml from 3 to 4.

Release notes

Sourced from senzing-factory/build-resources/.github/workflows/add-to-project.yaml's releases.

4.0.0

What's Changed

• #260 make shared workflows generic, misc cleanup by @​kernelsam in senzing-factory/build-resources#261

Full Changelog: senzing-factory/build-resources@v3...4.0.0

3.0.31

What's Changed

• Bump super-linter/super-linter from 8.4.0 to 8.5.0 by @​dependabot[bot] in senzing-factory/build-resources#257
• if the PR's REFRESHED_AT matches main's value, it only passes if that… by @​kernelsam in senzing-factory/build-resources#259

Full Changelog: senzing-factory/build-resources@v3...3.0.31

3.0.30

What's Changed

• Bump super-linter/super-linter from 8.3.1 to 8.3.2 by @​dependabot[bot] in senzing-factory/build-resources#254
• Bump actions/download-artifact from 6 to 7 by @​dependabot[bot] in senzing-factory/build-resources#250
• Bump super-linter/super-linter from 8.3.2 to 8.4.0 by @​dependabot[bot] in senzing-factory/build-resources#255
• Bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in senzing-factory/build-resources#249
• Fix regex for filtering GitHub workflows by @​kernelsam in senzing-factory/build-resources#256

Full Changelog: senzing-factory/build-resources@v3...3.0.30

3.0.29

What's Changed

• Bump super-linter/super-linter from 8.3.0 to 8.3.1 by @​dependabot[bot] in senzing-factory/build-resources#252
• Remove validation for natural language in workflows by @​kernelsam in senzing-factory/build-resources#253

Full Changelog: senzing-factory/build-resources@v3...3.0.29

3.0.28

What's Changed

• Add Markdown formatting guidelines to PR template by @​kernelsam in senzing-factory/build-resources#244
• Enhance PR review instructions for local and GitHub by @​kernelsam in senzing-factory/build-resources#246
• 247 dockter 1 by @​docktermj in senzing-factory/build-resources#248

New Contributors

• @​docktermj made their first contribution in senzing-factory/build-resources#248

Full Changelog: senzing-factory/build-resources@v3...3.0.28

3.0.27

Full Changelog: senzing-factory/build-resources@v3...3.0.27

3.0.26

Full Changelog: senzing-factory/build-resources@v3...3.0.26

... (truncated)

Changelog

Sourced from senzing-factory/build-resources/.github/workflows/add-to-project.yaml's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, markdownlint, and this project adheres to Semantic Versioning.

[Unreleased]

• Thing 5
• Thing 4

[1.0.1] - yyyy-mm-dd

Added to 1.0.1

• Thing 3

Fixed in 1.0.1

• Thing 2

[1.0.0] - yyyy-mm-dd

Added to 1.0.0

• Thing 2
• Thing 1

Commits

• 52eb86b bump tags to v4, slack channel override, missing claude settings (#262)
• 08fb769 #260 make shared workflows generic, misc cleanup (#261)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #260
Resolves #262
Resolves #261
Resolves senzing-factory/build-resources#261
Resolves senzing-factory/build-resources#257
Resolves senzing-factory/build-resources#259
Resolves senzing-factory/build-resources#254
Resolves senzing-factory/build-resources#250
Resolves senzing-factory/build-resources#255
Resolves senzing-factory/build-resources#249
Resolves senzing-factory/build-resources#256
Resolves senzing-factory/build-resources#252
Resolves senzing-factory/build-resources#253
Resolves senzing-factory/build-resources#244
Resolves senzing-factory/build-resources#246
Resolves senzing-factory/build-resources#248

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Overview

This PR updates the workflow reference from v3 to v4 for the add-to-project.yaml workflow from senzing-factory/build-resources.

---

Review Checklist Results

Code Quality

✅ Code follows style guide

• This is a workflow configuration change, not application code. The YAML formatting is correct and follows standard GitHub Actions conventions.

✅ No commented-out code

• No commented code present.

✅ Meaningful variable names

• All variables and parameters are clearly named (SENZING_GITHUB_PROJECT_RW_TOKEN, project-number, etc.).

✅ DRY principle followed

• N/A for this single-line version bump change.

✅ No defects identified

• The change is a straightforward version update from v3 to v4. No logic errors, edge cases, or potential crashes introduced.
• Note: The success of this change depends on the v4 version being compatible with the current configuration. Ensure the referenced workflow exists and maintains backward compatibility.

✅ Project memory consideration

• No ./.claude/CLAUDE.md file exists in this repository based on the context provided.

Testing

⚠️ Testing considerations

• Unit tests: N/A - This is a workflow configuration change, not application code.
• Integration tests: N/A - GitHub Actions workflows are tested by execution.
• Edge cases: Not applicable.
• Test coverage: Not applicable.

Recommendation: Verify that the workflow executes successfully after merge by monitoring the next triggered workflow run.

Documentation

✅ Documentation review

• Readme updated: Not needed for this dependency version bump.
• API docs updated: Not applicable.
• Inline comments: Not needed for this simple version change.
• CHANGELOG.md updated: ❌ Missing - This change should be documented in CHANGELOG.md. File: CHANGELOG.md (if it exists at project root).
• Markdown formatting: Not applicable (no markdown files changed).

Action Required: Add an entry to CHANGELOG.md documenting the workflow version update.

Security

✅ No hardcoded credentials

• Credentials properly use GitHub secrets (${{ secrets.SENZING_GITHUB_PROJECT_RW_TOKEN }}).

✅ No sensitive data in logs

• No changes that would expose sensitive information.

✅ No license files checked in

• No .lic files or AQAAAD strings detected in the diff.

✅ Proper secret handling

• All sensitive values use GitHub's secret management correctly.

---

Summary

Overall Assessment: ✅ Approved with minor recommendations

Required Changes:

• ❌ CHANGELOG.md: Add an entry documenting this workflow version update (e.g., "Updated add-to-project workflow from v3 to v4").

Recommendations:

1. Monitor the first workflow run after merge to ensure v4 is compatible with current configuration
2. Review the changelog for senzing-factory/build-resources/.github/workflows/add-to-project.yaml@v4 to understand what changes were introduced

Files Reviewed:

• .github/workflows/add-to-project-senzing.yaml:17 - Version bump from v3 to v4

---

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

Automated Code Review

Analyzing the pull request diff against the Senzing code review checklist.

---

Review Results

Code Quality

✅ Code follows style guide - The change is a simple version bump in a GitHub Actions workflow file, which doesn't involve code style considerations.

✅ No commented-out code - No commented code present.

✅ Meaningful variable names - N/A for this change (only version number modified).

✅ DRY principle followed - N/A for this change.

✅ Identify Defects - No bugs, logic errors, or security vulnerabilities introduced. This is a straightforward dependency version update from v3 to v4 for the add-to-project.yaml workflow in .github/workflows/add-to-project-senzing.yaml:17.

✅ Project memory configuration - No .claude/CLAUDE.md file appears to be relevant to this workflow change.

Testing

⚠️ Testing concerns - While this is a workflow dependency update, there's no indication in the PR of:

• Whether the v4 version has been tested with this repository's configuration
• What changes exist between v3 and v4 that might affect behavior
• Whether the workflow was manually triggered to verify compatibility

Recommendation: Before merging, ensure the v4 workflow has been tested or reviewed for breaking changes.

Documentation

❌ CHANGELOG.md updated - The diff shows no update to CHANGELOG.md. Dependency version bumps, especially for GitHub Actions workflows, should be documented.

⚠️ Documentation for version change - No indication of why the version is being updated (new features, bug fixes, breaking changes in v4).

✅ Markdown formatting - N/A for this change (no markdown files modified).

Security

✅ No hardcoded credentials - No credentials present.

✅ Input validation - N/A for this change.

✅ Proper error handling - N/A for this change.

✅ No sensitive data in logs - N/A for this change.

✅ No license files flagged - No .lic files or AQAAAD strings present.

---

Summary

Overall Assessment: ⚠️ Approve with recommendations

This is a low-risk change updating a GitHub Actions workflow dependency. However, two items should be addressed:

1. Required: Update CHANGELOG.md to document this workflow version bump
2. Recommended: Verify that the v4 workflow has been tested and is compatible with the current configuration

Files requiring attention:

• .github/workflows/add-to-project-senzing.yaml:17 - Version bump location
• CHANGELOG.md - Missing documentation of this change

---

Automated code review analyzing defects and coding standards