mix/selfpost
1
0
Fork 0
Code Issues Pull Requests Actions 10 Packages Projects Releases Wiki Activity

docs: SECURITY.md supports the 2.x line (audit X1)

Browse Source 
Security audit 2026-10-17, finding X1, stage 0: the supported-versions
table named 1.x while the product is at 2.14 - an operator would have
read 2.x as unsupported. Latest 2.x yes, earlier 2.x and 1.x no.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
mix
2026-10-17 21:37:08 +03:00
co-authored by Claude Opus 5.5
parent 8820294472
commit 2c8e981f89
3 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SECURITY.md
+4 -3
View File
@@ -3,13 +3,14 @@
## Supported versions
SelfPost follows SemVer. Fixes are issued for the **latest minor release of the
1.x line** only; there is no backporting to earlier minors. Upgrade before
2.x line** only; there is no backporting to earlier minors or to 1.x. Upgrade before
reporting if you are behind — the image tag is `ghcr.io/mixeme/selfpost:X.Y.Z`.
| Version | Supported |
|---|---|
| latest 1.x | yes |
| earlier 1.x | no — upgrade first |
| latest 2.x | yes |
| earlier 2.x | no — upgrade first |
| 1.x | no — upgrade to 2.x (guide § Upgrading) |
| 0.x | no (pre-release) |
## Reporting a vulnerability