Bump senzing-factory/build-resources/.github/workflows/cspell.yaml from 3 to 4

[dependabot]

Bumps senzing-factory/build-resources/.github/workflows/cspell.yaml from 3 to 4.

Release notes

Sourced from senzing-factory/build-resources/.github/workflows/cspell.yaml's releases.

4.0.0

What's Changed

• #260 make shared workflows generic, misc cleanup by @​kernelsam in senzing-factory/build-resources#261

Full Changelog: senzing-factory/build-resources@v3...4.0.0

3.0.31

What's Changed

• Bump super-linter/super-linter from 8.4.0 to 8.5.0 by @​dependabot[bot] in senzing-factory/build-resources#257
• if the PR's REFRESHED_AT matches main's value, it only passes if that… by @​kernelsam in senzing-factory/build-resources#259

Full Changelog: senzing-factory/build-resources@v3...3.0.31

3.0.30

What's Changed

• Bump super-linter/super-linter from 8.3.1 to 8.3.2 by @​dependabot[bot] in senzing-factory/build-resources#254
• Bump actions/download-artifact from 6 to 7 by @​dependabot[bot] in senzing-factory/build-resources#250
• Bump super-linter/super-linter from 8.3.2 to 8.4.0 by @​dependabot[bot] in senzing-factory/build-resources#255
• Bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in senzing-factory/build-resources#249
• Fix regex for filtering GitHub workflows by @​kernelsam in senzing-factory/build-resources#256

Full Changelog: senzing-factory/build-resources@v3...3.0.30

3.0.29

What's Changed

• Bump super-linter/super-linter from 8.3.0 to 8.3.1 by @​dependabot[bot] in senzing-factory/build-resources#252
• Remove validation for natural language in workflows by @​kernelsam in senzing-factory/build-resources#253

Full Changelog: senzing-factory/build-resources@v3...3.0.29

3.0.28

What's Changed

• Add Markdown formatting guidelines to PR template by @​kernelsam in senzing-factory/build-resources#244
• Enhance PR review instructions for local and GitHub by @​kernelsam in senzing-factory/build-resources#246
• 247 dockter 1 by @​docktermj in senzing-factory/build-resources#248

New Contributors

• @​docktermj made their first contribution in senzing-factory/build-resources#248

Full Changelog: senzing-factory/build-resources@v3...3.0.28

3.0.27

Full Changelog: senzing-factory/build-resources@v3...3.0.27

3.0.26

Full Changelog: senzing-factory/build-resources@v3...3.0.26

... (truncated)

Changelog

Sourced from senzing-factory/build-resources/.github/workflows/cspell.yaml's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, markdownlint, and this project adheres to Semantic Versioning.

[Unreleased]

• Thing 5
• Thing 4

[1.0.1] - yyyy-mm-dd

Added to 1.0.1

• Thing 3

Fixed in 1.0.1

• Thing 2

[1.0.0] - yyyy-mm-dd

Added to 1.0.0

• Thing 2
• Thing 1

Commits

• 52eb86b bump tags to v4, slack channel override, missing claude settings (#262)
• 08fb769 #260 make shared workflows generic, misc cleanup (#261)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Resolves #260
Resolves #262
Resolves #261
Resolves senzing-factory/build-resources#261
Resolves senzing-factory/build-resources#257
Resolves senzing-factory/build-resources#259
Resolves senzing-factory/build-resources#254
Resolves senzing-factory/build-resources#250
Resolves senzing-factory/build-resources#255
Resolves senzing-factory/build-resources#249
Resolves senzing-factory/build-resources#256
Resolves senzing-factory/build-resources#252
Resolves senzing-factory/build-resources#253
Resolves senzing-factory/build-resources#244
Resolves senzing-factory/build-resources#246
Resolves senzing-factory/build-resources#248

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Code Quality

✅ Code follows style guide - This is a GitHub Actions workflow configuration change that updates a version reference. The YAML formatting is correct and follows standard GitHub Actions conventions.

✅ No commented-out code - Clean diff with no commented code.

✅ Meaningful variable names - N/A for this change (workflow version bump only).

✅ DRY principle followed - N/A for this change.

✅ No defects identified - This is a straightforward version bump from v3 to v4 of a reusable workflow. The change appears safe, though it's worth noting:

• .github/workflows/spellcheck.yaml:13 - Version updated from @v3 to @v4
• This assumes v4 of the cspell workflow is stable and tested
• No breaking changes are introduced in the workflow interface

✅ Project memory (./.claude/CLAUDE.md) - No project-specific memory file found in the repository, so no additional context to consider.

Testing

⚠️ Testing considerations - Since this is a workflow dependency version bump:

• Unit/integration tests don't directly apply
• The change should be verified by triggering the spellcheck workflow
• Recommend monitoring the first few runs after merge to ensure v4 works as expected

Documentation

✅ Documentation requirements - For a dependency version bump:

• No README update needed (internal workflow change)
• No API docs affected
• No inline comments needed for this simple change
• ⚠️ CHANGELOG.md - Consider adding an entry like "Updated cspell workflow to v4" if the project maintains a changelog for infrastructure changes
• ✅ Markdown formatting - The workflow YAML file is not markdown, so CommonMark spec doesn't apply

Security

✅ No hardcoded credentials - None present.

✅ Input validation - N/A for workflow version reference.

✅ Proper error handling - Handled by the referenced workflow.

✅ No sensitive data in logs - None introduced.

✅ No license files or sensitive strings - No .lic files or AQAAAD strings detected in this diff.

---

Summary

Overall Assessment: ✅ APPROVED

This is a clean, low-risk change that updates the cspell reusable workflow from v3 to v4. The change follows best practices for workflow maintenance.

Recommendations:

1. If a CHANGELOG.md exists and tracks infrastructure changes, consider documenting this update
2. Monitor the first workflow run post-merge to confirm v4 compatibility
3. Ensure the team is aware of any new features or breaking changes introduced in the cspell workflow v4

No blocking issues found.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Code Quality

✅ Code follows style guide - This is a GitHub Actions workflow version bump, not application code. The YAML formatting is correct.

✅ No commented-out code - Clean change, no commented code present.

✅ Meaningful variable names - N/A for this change (workflow version reference).

✅ DRY principle followed - N/A for this change.

✅ Identify Defects - No defects identified. This is a straightforward version bump from v3 to v4 of the reusable cspell workflow (.github/workflows/spellcheck.yaml:13).

⚠️ Project memory configuration - No .claude/CLAUDE.md found in the repository to consider.

Testing

⚠️ Testing considerations - This workflow change should be verified to ensure:

• The v4 tag exists in the senzing-factory/build-resources repository
• The v4 version is backward compatible or that any breaking changes are acceptable
• The spellcheck workflow runs successfully with the new version

Note: Cannot verify test coverage as this is infrastructure code, not application code.

Documentation

✅ Readme updated if needed - N/A for workflow version bump.

✅ API docs updated - N/A for this change.

✅ Inline comments for complex logic - No complex logic requiring comments.

⚠️ CHANGELOG.md updated - Unable to verify if CHANGELOG.md was updated. For a workflow dependency version bump, this may or may not be required depending on project conventions. Let me check.

✅ Markdown formatting - N/A for this specific change (YAML file only).

Security

✅ No hardcoded credentials - None present.

✅ Input validation implemented - N/A for workflow version reference.

✅ Proper error handling - N/A for this change.

✅ No sensitive data in logs - None present.

✅ No license files checked in - No .lic files or AQAAAD strings in this diff.

---

Summary

This PR contains a simple and safe change - bumping the reusable cspell workflow from version 3 to version 4. The change is minimal and well-scoped.

Recommendations:

1. Verify that the v4 tag exists and is stable in senzing-factory/build-resources
2. Review the release notes for the v3→v4 upgrade to understand what changes are included
3. Monitor the first workflow run after merge to ensure spellcheck continues functioning as expected

Overall Assessment: ✅ APPROVED - No blocking issues found.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

Code Review Analysis

Analyzing the pull request diff against the Senzing code review checklist:

Summary

This PR updates the GitHub Actions workflow reference from @v3 to @v4 for the cspell workflow. This is a minor dependency version bump.

---

Review Checklist Results

Code Quality

• ✅ Code follows style guide - This is a GitHub Actions workflow file with a single version bump. The YAML formatting is correct and follows standard conventions.

• ✅ No commented-out code - No commented code present.

• ✅ Meaningful variable names - Not applicable for this change.

• ✅ DRY principle followed - Not applicable for this change.

• ✅ Identify Defects - No defects identified. The change is straightforward - updating a workflow reference version from v3 to v4. The syntax is correct and the path remains valid.

• ✅ Project memory configuration - No .claude/CLAUDE.md file found in the repository, so no project-specific conventions to check against.

Testing

• ✅ Unit tests for new functions - Not applicable. This is a workflow configuration change, not code functionality.

• ✅ Integration tests for new endpoints - Not applicable.

• ✅ Edge cases covered - Not applicable.

• ✅ Test coverage > 80% - Not applicable for workflow configuration.

Documentation

• ✅ Readme updated if needed - No README update needed. This is an internal workflow dependency update that doesn't affect user-facing functionality.

• ✅ API docs updated - Not applicable.

• ✅ Inline comments for complex logic - Not applicable. The change is self-explanatory.

• ✅ CHANGELOG.md updated - No CHANGELOG.md update included. However, dependency bumps in CI workflows typically don't require changelog entries unless they introduce breaking changes or new user-facing features.

• ✅ Markdown formatting - Not applicable, no markdown files modified.

Security

• ✅ No hardcoded credentials - No credentials present.

• ✅ Input validation implemented - Not applicable.

• ✅ Proper error handling - Not applicable.

• ✅ No sensitive data in logs - Not applicable.

• ✅ No license files or AQAAAD strings - Not applicable to this change.

---

Overall Assessment

✅ APPROVED

This is a clean, straightforward dependency update for the cspell GitHub Actions workflow. The change:

• Updates the reusable workflow reference from v3 to v4
• Maintains correct YAML syntax
• Follows proper versioning practices
• Introduces no security concerns or code quality issues

Recommendations

• None. This is a standard dependency update.

Minor Note

• Consider checking the release notes for cspell.yaml@v4 to ensure there are no breaking changes or new configuration options that might benefit this project.

---

Automated code review analyzing defects and coding standards