[PM-18892] ci: Comment linked issues when a new GitHub Release is published

[vvolkgang]

🎟️ Tracking

PM-18892

📔 Objective

Add a script and workflow to automatically comment on GitHub issues when a release is published, notifying them that linked PRs have shipped.

Test comments:

• [PM-24129] test issue #5573 (comment)
• [BWA-173] test issue #5570 (comment)
• [BWA-174] test issue #5571 (comment)

[claude]

Claude finished @vvolkgang's task in 6m 19s —— View job

---

Code Review Complete

• Gather context and read changed files
• Perform code review
• Post review findings

Review Summary: PM-18892 ci: Comment linked issues when a new GitHub Release is published

Reviewed Files:

File	Type	Lines Changed
.github/scripts/gh_release_update_issues.py	New	+150
.github/workflows/sdlc-gh-release-update-issue.yml	New	+37

Findings

No new issues found. The previous review's suggestion about error handling in the GraphQL batch-fetch has been addressed by the author (now uses ::error:: annotation and re-raises).

Observations (no action required)

• Security: Workflow permissions are tightly scoped (contents: read, issues: write), checkout uses persist-credentials: false, and the action is pinned to a SHA
• Efficiency: Batched GraphQL approach avoids N+1 API calls for linked issues
• Error handling: Properly raises the GraphQL error and prints it with a GitHub workflow ::error:: command for visibility
• No duplicate comment guard: Re-triggering the workflow (e.g., via workflow_dispatch for the same release) will post duplicate comments on issues -- acceptable tradeoff for simplicity but worth noting
• Workflow file rename: The workflow was renamed from sdlc-on-release-created.yml to sdlc-gh-release-update-issue.yml and the name/run-name updated to better reflect its purpose

Verdict: Approve -- Clean and well-structured CI addition. Previous suggestion has been addressed.

---

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.44%. Comparing base (4a68c23) to head (394c2f7).
⚠️ Report is 13 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #6552      +/-   ##
==========================================
+ Coverage   86.34%   86.44%   +0.10%     
==========================================
  Files         791      786       -5     
  Lines       56717    56667      -50     
  Branches     8213     8251      +38     
==========================================
+ Hits        48971    48985      +14     
+ Misses       4891     4816      -75     
- Partials     2855     2866      +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

Checkmarx One – Scan Summary & Details – 2f042dd9-2936-48ae-990e-92d5367301cf

Fixed Issues (4)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	HttpOnly_Cookie_Flag_Not_Set	/app/src/test/kotlin/com/x8bit/bitwarden/data/platform/manager/util/CookieConfigurationDataExtensionsTest.kt: 45
	HttpOnly_Cookie_Flag_Not_Set	/app/src/test/kotlin/com/x8bit/bitwarden/data/platform/manager/util/CookieConfigurationDataExtensionsTest.kt: 46
	HttpOnly_Cookie_Flag_Not_Set	/app/src/test/kotlin/com/x8bit/bitwarden/data/platform/manager/util/CookieConfigurationDataExtensionsTest.kt: 62
	HttpOnly_Cookie_Flag_Not_Set	/app/src/test/kotlin/com/x8bit/bitwarden/data/platform/manager/util/CookieConfigurationDataExtensionsTest.kt: 31