paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 14 Packages Projects Releases Wiki Activity

Merge pull request #23359 from backstage/rugvip/patch

Browse Source 
docs/overview/versioning-policy: commit to backporting high and critical vulnerabilities
This commit is contained in:
Patrik Oldsberg
2024-03-01 15:18:58 +01:00
committed by GitHub
parent b545395b08 7112a4d9e6
commit 9e009d80dc
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/overview/versioning-policy.md
+3 -1
View File
@@ -68,7 +68,9 @@ The following versioning policy applies to the main-line releases only.
done when necessary and with the goal of having minimal impact. When possible,
there will always be a deprecation path for a breaking change.
- Security fixes **may** be backported to older releases based on the simplicity
of the upgrade path, and the severity of the vulnerability.
of the upgrade path, and the severity of the vulnerability. Vulnerabilities
with a severity of `high` or `critical` will always be backported to releases
for the last 6 months if feasible.
- Bug reports are valid only if reproducible in the most recent release, and bug
fixes are only applied to the next release.
- We will do our best to adhere to this policy.