<div dir="ltr">Hi Jeremy,<div><br></div><div>That's a good point. In practice, we recently did a security release for 3.10, despite the fact that it was technically 5 months past its official security EOL. To me, it sounds like a good discussion topic for a future <a href="https://wiki.evergreen-ils.org/doku.php?id=dev:meetings">dev meeting</a>, would you be interested in putting it on an agenda and introducing the topic, Jeremy?</div><div><br></div><div>I haven't heard anybody say that they need more bug fix 3.11 releases after this one, so we're currently building 3.11.7 with the assumption that it will be the last bugfix release in the series, and that it will be security-only after this.</div><div><br></div><div>Thanks,</div><div><br></div><div> -Jane</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">El jue, 11 jul 2024 a la(s) 7:44 a.m., Murray, Jeremy B (<a href="mailto:JMurray@library.in.gov">JMurray@library.in.gov</a>) escribió:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class="msg-3505382090000735515">
<div lang="EN-US" style="overflow-wrap: break-word;">
<div class="m_-3505382090000735515WordSection1">
<p class="MsoNormal"><span style="font-size:11pt;color:rgb(10,47,65)">I think it seems odd to have 1 year of general fixes and only 3 additional months for security fixes. Ideally, I would prefer to see security fixes extended to 6 months, especially for those
who upgrade yearly on a specific schedule that might not match up completely with Evergreen’s release schedule.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;color:rgb(10,47,65)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;color:rgb(10,47,65)">In practice, if a new vulnerability is discovered and enough of us are just beyond the security fix EOL, I imagine we’d still backport the fix.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;color:rgb(10,47,65)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;color:rgb(10,47,65)"><u></u> <u></u></span></p>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><b><span style="color:rgb(10,47,65)">Jeremy Murray</span></b><span style="color:rgb(10,47,65)">
<br>
Evergreen Indiana System Administrator<u></u><u></u></span></p>
<p class="MsoNormal"><span style="color:rgb(10,47,65)">MIS Supervisor</span><span style="font-size:11pt;color:rgb(10,47,65)"><u></u><u></u></span></p>
<p class="MsoNormal"><i><span style="color:rgb(10,47,65)">Management Information Services<u></u><u></u></span></i></p>
<p class="MsoNormal"><span style="color:rgb(10,47,65)">Indiana State Library<u></u><u></u></span></p>
</div>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><span style="font-size:11pt;color:rgb(10,47,65)"><u></u> <u></u></span></p>
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> Evergreen-dev <<a href="mailto:evergreen-dev-bounces@list.evergreen-ils.org" target="_blank">evergreen-dev-bounces@list.evergreen-ils.org</a>>
<b>On Behalf Of </b>Jane Sandberg via Evergreen-dev<br>
<b>Sent:</b> Thursday, July 11, 2024 10:22 AM<br>
<b>To:</b> Evergreen Development Discussion List <<a href="mailto:evergreen-dev@list.evergreen-ils.org" target="_blank">evergreen-dev@list.evergreen-ils.org</a>><br>
<b>Subject:</b> [Evergreen-dev] Can we make 3.11.7 the last 3.11 release?<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><span style="font-family:Arial,sans-serif;color:red">**** This is an EXTERNAL email. Exercise caution. DO NOT open attachments or click links from unknown senders or unexpected email. ****</span>
<u></u><u></u></p>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="100%" align="center">
</div>
<div>
<div>
<p class="MsoNormal">Hi all, <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">According to <a href="https://protect2.fireeye.com/v1/url?k=31323334-50bba2bf-31367a34-4544474f5631-e51a3f1bddb1dcab&q=1&e=85966b7f-41b5-4272-aade-6ba283ad7c3c&u=https%3A%2F%2Fwiki.evergreen-ils.org%2Fdoku.php%3Fid%3Ddev%3Arelease_process%3Aschedule%26s%5B%5D%3Dreleases" target="_blank">
this wiki pag</a>e, 3.11 met its end of life for general bug fixes in May. There are bug fixes that have been pushed to rel_3_11, we've missed some monthly releases, and 3.11.7 has already been announced -- so I'm okay with us still putting out a 3.11 bugfix
release next week.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">But is it okay to call it done for the 3.11 series after this? Of course, we could still do a security release for the 3.11 series if needed.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">What do you think?<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"> -Jane<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</div></blockquote></div>