paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 16 Packages Projects Releases Wiki Activity

docs/overview/versioning-policy: commit to backporting high and critical vulnerabilities

Browse Source 
Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
This commit is contained in:
Patrik Oldsberg
2024-03-01 15:03:55 +01:00
parent b130eb36b4
commit 7112a4d9e6
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/overview/versioning-policy.md
+3 -1
View File
@@ -68,7 +68,9 @@ The following versioning policy applies to the main-line releases only.
done when necessary and with the goal of having minimal impact. When possible,
there will always be a deprecation path for a breaking change.
- Security fixes **may** be backported to older releases based on the simplicity
of the upgrade path, and the severity of the vulnerability.
of the upgrade path, and the severity of the vulnerability. Vulnerabilities
with a severity of `high` or `critical` will always be backported to releases
for the last 6 months if feasible.
- Bug reports are valid only if reproducible in the most recent release, and bug
fixes are only applied to the next release.
- We will do our best to adhere to this policy.