Implement new maintenance policy by rafaelfranca · Pull Request #52471 · rails/rails

byroot

skipkayhil

@rafaelfranca

Main changes are:

* Releases are maintained by a pre-defined, fixed period of time.
  One year for bug fixes and two years for security fixes.

* Distinction between severe security issues and regular security issues
  is removed.

* Npm versioning is updated to match not use the pre-release `-`
separator.

rafaelfranca added a commit that referenced this pull request

Aug 1, 2024
Implement new maintenance policy

This was referenced

Aug 6, 2024

mattbrictson added a commit to mattbrictson/endoflife.date that referenced this pull request

Aug 10, 2024
With the release of Rails 7.2, the Rails team has updated its
maintenance policy. To summarize the new policy:

> Releases are maintained by a pre-defined, fixed period of time.
> One year for bug fixes and two years for security fixes.

Ref: rails/rails#52471

This new policy applies to new releases starting with Rails 7.2. For
older releases, the EOL dates have been clarified as follows:

> 6.1 will reach end-of-life in October 2024.
> For 7.0, it will be April 2025
> For 7.1, it will be October 2025.

Ref: rails/rails#52471 (comment)

marcwrobel added a commit to endoflife-date/endoflife.date that referenced this pull request

Aug 13, 2024

etagwerker added a commit to fastruby/rails that referenced this pull request

Aug 16, 2024

@etagwerker

Austio added a commit to Austio/website that referenced this pull request

Oct 10, 2024
Respecfully request official change to maintenance policy for security updates until January 1, 2025 based on [this discussion](rails/rails#52471) 

Some major points
 - Rails created an official maintenance policy [in August](rails/rails#52471) that sets definite dates for security and maintenance periods.  This is excellent and allows us to ensure these updates are competed on time.
 - Based on the previous policy, our team thought that we had maintenance until mid next year so have several apps that still need to be updated to the latest version of rails.
 - We will have all of these done by the end up the year.
 - I am willing to personally help here to backport any security issues