migrate project automation from g2-python board to garage board

[kernelsam]

Pull request questions

Which issue does this address

Issue number: #nnn

Why was change needed

???

What does change improve

???

[github-actions]

🤖 Claude Code Review

No prior memory. Proceeding with the review now.

---

Code Review

This PR migrates GitHub Actions project automation from the g2-python board to the garage board by removing old workflows and renaming one file. The changes are purely to CI/CD workflow YAML files.

---

Code Quality

✅ Code follows style guide — No source code changed; workflow files are clean YAML.

✅ No commented-out code — Only deletions and a rename; no commented lines present.

✅ Meaningful variable/file names — The rename from move-pr-to-done-garage-dependabot.yaml → move-pr-to-done-dependabot.yaml is an improvement: removes redundant garage qualifier that was inconsistent with the other workflow naming convention.

✅ DRY principle — Removing duplicated project board workflows (g2-python duplicated garage workflows) improves this.

✅ No defects identified — The deletions are straightforward. The rename is 100% similarity (no content changes). One observation: there is no corresponding add-to-project-garage-dependabot.yaml or add-to-project-garage.yaml visible in this diff, so the PR assumes those already exist in the repo. This is consistent with commit 05c6b4e ("migrate project automation from g2-python board to garage board") which predates this diff — verify the garage equivalents are present.

✅ CLAUDE.md review — The project CLAUDE.md contains no local-dev-specific content; it's appropriately general.

---

Testing

✅ N/A — No source code or test logic changed. Workflow file deletions/renames do not require unit or integration tests.

---

Documentation

✅ README — No user-facing functionality changed; README update not required.

✅ Inline comments — N/A; workflow YAML is self-explanatory.

⚠️ CHANGELOG.md — No CHANGELOG entry is visible in this diff. If this project maintains a changelog, a brief entry noting the project board migration would be appropriate, though for a pure CI/CD housekeeping change this is low priority.

---

Security

✅ No hardcoded credentials — All secrets use GitHub Actions secret references (${{ secrets.* }}).

✅ No sensitive data — Deletions only; nothing new introduced.

✅ No license files (.lic) — None present.

✅ Permissions — The deleted workflows used permissions: {} at the top level with scoped repository-projects: write per job, which is correct least-privilege practice.

---

Summary

This is a clean housekeeping PR. The only item worth a quick check is confirming that add-to-project-garage.yaml and add-to-project-garage-dependabot.yaml already exist in .github/workflows/ (i.e., that the garage equivalents of the deleted g2-python workflows are in place), so no automation is silently dropped. The rename is a net improvement to naming consistency.

Verdict: Approved with minor note — verify garage workflow counterparts exist before merging if not already confirmed.

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter