blaginin commented on PR #21239: URL: https://github.com/apache/datafusion/pull/21239#issuecomment-4158186936
thanks for the review! > What do you think of the codeql suggestion to limit the token? I think that is a good idea in light of the recent npm supply chain attacks sure! i think we need to limit those for all the actions, will do that in the PR on top > Also, does this PR enable the merge queue? I didn't see any specific change but maybe I missed it it's actually already enabled! <img width="932" height="314" alt="image" src="https://github.com/user-attachments/assets/5be3d707-1ed1-485f-ad12-1f7ffca6ce7a"; /> currently it's a no-op because there are no required checks (MQ only runs the required ones). once we add them, the merge queue will start working! -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
