Bump senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml from 3 to 4

[dependabot]

Bumps senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml from 3 to 4.

Release notes

Sourced from senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml's releases.

4.0.0

What's Changed

• #260 make shared workflows generic, misc cleanup by @​kernelsam in senzing-factory/build-resources#261

Full Changelog: senzing-factory/build-resources@v3...4.0.0

3.0.31

What's Changed

• Bump super-linter/super-linter from 8.4.0 to 8.5.0 by @​dependabot[bot] in senzing-factory/build-resources#257
• if the PR's REFRESHED_AT matches main's value, it only passes if that… by @​kernelsam in senzing-factory/build-resources#259

Full Changelog: senzing-factory/build-resources@v3...3.0.31

3.0.30

What's Changed

• Bump super-linter/super-linter from 8.3.1 to 8.3.2 by @​dependabot[bot] in senzing-factory/build-resources#254
• Bump actions/download-artifact from 6 to 7 by @​dependabot[bot] in senzing-factory/build-resources#250
• Bump super-linter/super-linter from 8.3.2 to 8.4.0 by @​dependabot[bot] in senzing-factory/build-resources#255
• Bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in senzing-factory/build-resources#249
• Fix regex for filtering GitHub workflows by @​kernelsam in senzing-factory/build-resources#256

Full Changelog: senzing-factory/build-resources@v3...3.0.30

3.0.29

What's Changed

• Bump super-linter/super-linter from 8.3.0 to 8.3.1 by @​dependabot[bot] in senzing-factory/build-resources#252
• Remove validation for natural language in workflows by @​kernelsam in senzing-factory/build-resources#253

Full Changelog: senzing-factory/build-resources@v3...3.0.29

3.0.28

What's Changed

• Add Markdown formatting guidelines to PR template by @​kernelsam in senzing-factory/build-resources#244
• Enhance PR review instructions for local and GitHub by @​kernelsam in senzing-factory/build-resources#246
• 247 dockter 1 by @​docktermj in senzing-factory/build-resources#248

New Contributors

• @​docktermj made their first contribution in senzing-factory/build-resources#248

Full Changelog: senzing-factory/build-resources@v3...3.0.28

3.0.27

Full Changelog: senzing-factory/build-resources@v3...3.0.27

3.0.26

Full Changelog: senzing-factory/build-resources@v3...3.0.26

... (truncated)

Changelog

Sourced from senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, markdownlint, and this project adheres to Semantic Versioning.

[Unreleased]

• Thing 5
• Thing 4

[1.0.1] - yyyy-mm-dd

Added to 1.0.1

• Thing 3

Fixed in 1.0.1

• Thing 2

[1.0.0] - yyyy-mm-dd

Added to 1.0.0

• Thing 2
• Thing 1

Commits

• 52eb86b bump tags to v4, slack channel override, missing claude settings (#262)
• 08fb769 #260 make shared workflows generic, misc cleanup (#261)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #260
Resolves #262
Resolves #261
Resolves senzing-factory/build-resources#261
Resolves senzing-factory/build-resources#257
Resolves senzing-factory/build-resources#259
Resolves senzing-factory/build-resources#254
Resolves senzing-factory/build-resources#250
Resolves senzing-factory/build-resources#255
Resolves senzing-factory/build-resources#249
Resolves senzing-factory/build-resources#256
Resolves senzing-factory/build-resources#252
Resolves senzing-factory/build-resources#253
Resolves senzing-factory/build-resources#244
Resolves senzing-factory/build-resources#246
Resolves senzing-factory/build-resources#248

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Overview

This PR updates a workflow dependency version from v3 to v4 for the add-labels-to-issue.yaml workflow.

---

Review Results

Code Quality

✅ Code follows style guide - This is a YAML workflow file. The formatting is clean and follows standard GitHub Actions conventions.

✅ No commented-out code - No commented code present.

✅ Meaningful variable names - All identifiers are clear and descriptive.

✅ DRY principle followed - Not applicable to this single-line version bump.

✅ No defects identified - The change is straightforward: updating a workflow reference from v3 to v4. This type of dependency update is low-risk for introducing defects.

✅ Project memory configuration - No ./.claude/CLAUDE.md file exists in this repository that would affect this review.

Note: .github/workflows/add-labels-standardized.yaml:18 - Consider what breaking changes might exist between v3 and v4 of the referenced workflow. Ensure the secrets ORG_MEMBERSHIP_TOKEN and SENZING_MEMBERS are still compatible with v4.

---

Testing

⚠️ Testing requirements - For workflow updates, automated testing is limited. However:

• ❌ No evidence of workflow testing in the PR
• Recommendation: Monitor the first execution of this workflow after merge to ensure v4 behaves as expected
• Consider reviewing the changelog of senzing-factory/build-resources v4 to understand what changed

---

Documentation

✅ README updates - Not required for a version bump.

✅ API documentation - Not applicable.

✅ Inline comments - Not needed; the change is self-explanatory.

⚠️ CHANGELOG.md - Cannot determine if CHANGELOG.md exists or was updated. If this repository maintains a CHANGELOG.md, this version bump should be documented there.

✅ Markdown formatting - Not applicable to this YAML-only change.

---

Security

✅ No hardcoded credentials - Secrets are properly referenced via ${{ secrets.* }}.

✅ Input validation - Not applicable to workflow version references.

✅ Proper error handling - Error handling is managed by GitHub Actions runtime.

✅ No sensitive data in logs - No logging changes introduced.

✅ No license files - No .lic files or AQAAAD strings present in the diff.

Security consideration: .github/workflows/add-labels-standardized.yaml:18 - Verify that the v4 version of the external workflow (senzing-factory/build-resources) has been security reviewed and comes from a trusted source within your organization.

---

Summary

Overall Assessment: ✅ APPROVED with minor recommendations

This is a low-risk dependency version bump. The main concerns are:

1. Action Required: Verify compatibility of v4 with current secrets and workflow configuration
2. Recommended: Update CHANGELOG.md if it exists
3. Recommended: Review release notes for senzing-factory/build-resources v4 to understand changes
4. Recommended: Monitor first workflow execution post-merge

The change itself is clean and properly formatted. No code quality, security, or immediate functional issues detected.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Pull Request Summary

This PR updates a workflow dependency from v3 to v4 for the add-labels-to-issue.yaml workflow.

---

Review Results

Code Quality

✅ Code follows style guide

• This is a workflow configuration file update with minimal code changes
• The change follows YAML formatting standards
• File: .github/workflows/add-labels-standardized.yaml:18

✅ No commented-out code

• No commented code present in the diff

✅ Meaningful variable names

• Not applicable - this is a version bump in a workflow reference

✅ DRY principle followed

• Not applicable for this type of change

✅ Defects Analysis

• No obvious bugs or logic errors introduced
• The version bump from v3 to v4 appears intentional based on the commit history showing similar updates to other workflows
• ⚠️ Recommendation: Verify that the v4 tag exists in the senzing-factory/build-resources repository and is compatible with the current secrets being passed (ORG_MEMBERSHIP_TOKEN, SENZING_MEMBERS)

✅ Project memory configuration

• No ./.claude/CLAUDE.md file exists in the repository, so no project-specific guidelines to consider

Testing

❌ Testing requirements not met

• No unit tests provided (though these may not be applicable for workflow changes)
• No integration tests provided
• No test coverage data
• Recommendation: While automated tests for GitHub Actions workflows are difficult, consider:
  • Testing the workflow in a development/staging repository first
  • Documenting what manual testing was performed
  • Verifying the v4 workflow runs successfully

Documentation

❌ Documentation incomplete

• .github/workflows/add-labels-standardized.yaml:18 - No CHANGELOG.md entry for this version bump
• No README updates explaining what changed in v4 or why the upgrade was necessary
• No inline comments explaining the rationale for the version bump
• Recommendation: Add a CHANGELOG.md entry describing this dependency update and any behavioral changes from v3 to v4

Security

✅ No hardcoded credentials

• Secrets are properly referenced via GitHub secrets mechanism

✅ Input validation

• Not applicable for this change

✅ Proper error handling

• Inherits error handling from the referenced workflow

✅ No sensitive data in logs

• No logging changes in this diff

✅ No license files

• No .lic files or AQAAAD strings detected in the diff

---

Summary

Overall Assessment: ⚠️ Acceptable with recommendations

The code change itself is clean and straightforward - a simple version bump. However, it lacks documentation about what changed between v3 and v4, and there's no evidence of testing or validation that v4 is compatible with the current setup.

Critical Issues

None

Recommendations

1. Add CHANGELOG.md entry documenting this upgrade (.github/workflows/add-labels-standardized.yaml:18)
2. Verify that senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4 exists and is stable
3. Document what behavioral changes or improvements v4 introduces compared to v3
4. Consider testing the workflow runs successfully after merge

---

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

Code Review Results

Pull Request Summary

This PR updates the GitHub Actions workflow reference from @v3 to @v4 for the add-labels-to-issue.yaml workflow.

---

Code Quality

✅ Code Style Compliance

• The change follows YAML formatting conventions
• No style violations detected

✅ No Commented-Out Code

• No commented code present

✅ Meaningful Variable Names

• N/A - No new variables introduced

✅ DRY Principle

• N/A - Simple version bump

✅ Defects Analysis

• No bugs, logic errors, or security vulnerabilities introduced
• The change is a straightforward dependency version update
• No edge cases to consider for this type of change

ℹ️ Project Memory (.claude/CLAUDE.md)

• No .claude/CLAUDE.md file found in the repository
• N/A for this review

---

Testing

⚠️ Unit Tests

• N/A - Workflow changes don't require unit tests
• Recommendation: Verify the @v4 workflow exists and is functional in the senzing-factory/build-resources repository before merging

⚠️ Integration Tests

• N/A - This is a workflow dependency update
• Recommendation: Monitor the first run after merge to ensure the updated workflow functions correctly

⚠️ Edge Cases

• N/A - Simple version reference update

⚠️ Test Coverage

• N/A - Workflow configuration changes

---

Documentation

✅ README

• No README updates needed for internal workflow changes

✅ API Documentation

• N/A - No API changes

✅ Inline Comments

• N/A - No complex logic requiring comments

❌ CHANGELOG.md

• File: Root directory
• Issue: CHANGELOG.md should be updated to document this workflow version upgrade
• Recommendation: Add an entry such as:

  ### Changed
  - Updated add-labels-to-issue workflow from v3 to v4
  

✅ Markdown Formatting

• The workflow YAML file doesn't contain markdown content
• N/A for this change

---

Security

✅ No Hardcoded Credentials

• Secrets are properly referenced via GitHub Secrets mechanism
• No credentials exposed

✅ Input Validation

• N/A - Workflow configuration only

✅ Error Handling

• N/A - Delegated to the referenced workflow

✅ Sensitive Data in Logs

• Secrets are properly masked by GitHub Actions
• No sensitive data exposure risk

✅ License Files Check

• No .lic files or AQAAAD strings detected in the diff

---

Summary

Overall Assessment: ✅ APPROVED with minor documentation suggestion

Critical Issues: 0

Warnings: 0

Suggestions: 1

The PR is a clean dependency version bump with no code quality or security concerns. The only improvement would be to add a CHANGELOG entry documenting this workflow version update.

Action Items:

1. Optional: Add CHANGELOG.md entry for this workflow version update (.github/workflows/add-labels-standardized.yaml:18)
2. Recommended: Verify senzing-factory/build-resources/.github/workflows/add-labels-to-issue.yaml@v4 exists and review its changelog for any breaking changes before merging

---

Automated code review analyzing defects and coding standards