tuxji commented on PR #1173: URL: https://github.com/apache/daffodil/pull/1173#issuecomment-1971560581
> I guess codecov renamed the tag? Maybe we should start version pinning github actions with commit hashes instead of tags if projects could change their tags. Yes, commit hashes are immutable while tags can be changed willy-nilly. Most projects don't change their tags, but we just saw it happen in codecov's case so I agree a commit hash would have avoided this corrective PR. If we decide to switch to commit hashes, we'll have to create a JIRA issue and convert all the tags to hashes in a separate PR. Meanwhile, here's my +1 approving this PR (officially I shouldn't approve/merge my own PR, but this is actually dependabot's PR needing a correction). -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
