httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe Jr." <>
Subject [Discuss] [VOTE] Formal deprecation of 2.0.x branch
Date Fri, 11 Nov 2011 20:34:14 GMT
On 11/11/2011 1:47 PM, André Malo wrote:
> * William A. Rowe Jr. wrote:
>> Stealing a plan executed by Colm for 1.3, I'd like to propose that
>> we set a two week window following committers' return-from-ApacheCon
>> to execute any backports "of general interest" and apply important
>> fixes/backports to pregsub allocation and non-absolute uri parsing.
>> On approval of this plan, I would offer to introduce the EOL notices
>> (as we ultimately committed to 1.3), tag and roll 2.0.65 on Nov 26th
>> and we would potentially approve and release 2.0 'final' this month.
> I'd prefer a "security only from now on" announcement / warning first, and
> keep it that way about another year or so. I don't think the users of 2.0
> are actually prepared for a statement like "support is gone now, effective
> immediately".
> We can put a statement into the docs similar to 1.3 (this time automated...)

So isn't it enough to say that "The project will choose to publish
further releases only for significant security fixes, or will choose
instead to publish patches for less significant security fixes for
12 months from the date of this final release.  From December 2012,
no further security patches or releases should be expected for the
2.0.x release family."?

More useful here to tweak the message than the plan, no?

View raw message