oracle-actions / setup-java

GitHub Action to download and install Oracle's Java Development Kit builds
Universal Permissive License v1.0
63 stars 11 forks source link

Update to use `actions/setup-java@v4` #66

Closed sormuras closed 11 months ago

sormuras commented 11 months ago

Update to use actions/setup-java@v4

Closes #60

TWiStErRob commented 9 months ago

@sormuras Please release this,

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/setup-java@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

sormuras commented 9 months ago

Thanks for the reminder, @TWiStErRob - I just released v1.3.3 and updated the v1 branch to the same content.

For your information, "Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release." and it allows you to use an unreleased action right away. Source: https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions

See also: https://blog.rafaelgss.dev/why-you-should-pin-actions-by-commit-hash