[PR] Don't use specific git hash (SHA1) for GitHub Actions [avro]

2025-03-03 Thread via GitHub
jbonofre opened a new pull request, #3331: URL: https://github.com/apache/avro/pull/3331 The use of specific Git hash (SHA1) for GitHub Actions versions is only required for external actions. We use all actions internal to the `apache/*`, `github/*` and `actions/*` namespaces without res

[PR] AVRO-3985: Apply trusted packages check on SpecificDatumReader(data) constructor [avro]

2025-03-03 Thread via GitHub
jbonofre opened a new pull request, #3330: URL: https://github.com/apache/avro/pull/3330 ## What is the purpose of the change The initial fix for AVRO-3985 applied only to one constructor in `SpecificDatumReader`. This change extend the trusted packages check in all constructors.