nielsbasjes commented on code in PR #2699:
URL: https://github.com/apache/avro/pull/2699#discussion_r1472502881
##########
.github/workflows/codeql-java-analysis.yml:
##########
@@ -70,17 +70,34 @@ jobs:
# queries: ./path/to/local/query, your-org/your-repo/queries@main
queries: +security-and-quality
+ - name: 'Setup Temurin JDK 8, 11, 17 & 21'
+ uses: actions/setup-java@387ac29b308b003ca37ba93a6cab5eb57c8f5f93 #
v4.0.0
Review Comment:
The way this works is that the actual exact tag of the version is appended
and systems like Renovate (unsure about Dependabot) will update that comment
too. So this way has both pinning to an exact version AND readbility. I prefer
it this way.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
