You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@groovy.apache.org by pa...@apache.org on 2022/03/24 04:11:18 UTC
[groovy] branch master updated: update versions in security policy
This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git
The following commit(s) were added to refs/heads/master by this push:
new 0905af8 update versions in security policy
0905af8 is described below
commit 0905af87e3ac99db7b4d434b6ee0c53e73ab5423
Author: Paul King <pa...@asert.com.au>
AuthorDate: Thu Mar 24 14:08:43 2022 +1000
update versions in security policy
---
.github/SECURITY.md | 15 +++++++++++----
1 file changed, 11 insertions(+), 4 deletions(-)
diff --git a/.github/SECURITY.md b/.github/SECURITY.md
index b23507c..0b064f8 100644
--- a/.github/SECURITY.md
+++ b/.github/SECURITY.md
@@ -18,17 +18,24 @@ limitations under the License.
## Supported Versions
-The latest released version in the Groovy 3.0.x stream of releases
+The latest released version in the Groovy 4.0.x stream of releases
is the currently recommended version of Groovy and requires JDK8 as a minimum.
+
+The latest released version in the Groovy 3.0.x stream of releases
+is the currently recommended version of Groovy if you require access
+to the legacy parser or legacy packages of classes whose packages
+were renamed due to split package remediation ([GROOVY-10542](https://issues.apache.org/jira/browse/GROOVY-10542)).
+
The latest released version in the Groovy 2.5.x stream is recommended where JDK7 is required.
| Version | Supported | Comment |
-| -------- | ------------------ | ---------------------------------------- |
+|----------| ------------------ |------------------------------------------|
| <= 2.3.x | :x: | |
| 2.4.x | :grey_question: | Only severe/critical vulnerabilities (*) |
-| 2.5.x | :white_check_mark: | |
+| 2.5.x | :white_check_mark: | Reduced releases on this branch |
| 3.0.x | :white_check_mark: | |
-| 4.x | :grey_question: | Pre-release status (**) |
+| 4.0.x | :white_check_mark: | |
+| 5.x | :grey_question: | Pre-release status (**) |
(\*) The 2.4.x stream is no longer the focus of the core team
but critical security fixes or community contributions may lead