jbonofre opened a new pull request, #3331:
URL: https://github.com/apache/avro/pull/3331
The use of specific Git hash (SHA1) for GitHub Actions versions is only
required for external actions.
We use all actions internal to the `apache/*`, `github/*` and `actions/*`
namespaces without res
jbonofre opened a new pull request, #3330:
URL: https://github.com/apache/avro/pull/3330
## What is the purpose of the change
The initial fix for AVRO-3985 applied only to one constructor in
`SpecificDatumReader`. This change extend the trusted packages check in all
constructors.