(tomee-site-generator) branch main updated: Adding transparency on vulnerability fixing and expectations

[db...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

dblevins pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee-site-generator.git


The following commit(s) were added to refs/heads/main by this push:
     new 9c237c7  Adding transparency on vulnerability fixing and expectations
9c237c7 is described below

commit 9c237c7f0c3bc9a85b85c3595b4046da84d8ba9f
Author: David Blevins <db...@tomitribe.com>
AuthorDate: Tue Jun 18 11:34:27 2024 -0700

    Adding transparency on vulnerability fixing and expectations
---
 src/main/jbake/content/download.adoc | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/main/jbake/content/download.adoc b/src/main/jbake/content/download.adoc
index a80d39b..6bab334 100755
--- a/src/main/jbake/content/download.adoc
+++ b/src/main/jbake/content/download.adoc
@@ -8,7 +8,9 @@
 
 You **must** link:https://www.apache.org/info/verification.html[verify] the integrity of the downloaded files. We provide OpenPGP signatures  (*.asc files) for every release file. This signature should be matched against link:https://downloads.apache.org/tomee/KEYS[KEYS] file which contains the OpenPGP keys of TomEE's Release Managers. We also provide SHA-512 checksums for every release file. After you download the file, you should calculate a checksum for your download, and make sure it [...]
 
-== [[tomee-9.1]]Apache TomEE 10
+*SECURITY NOTICE: This software is developed and maintained by unpaid volunteers who donate time as they have it.  There is no guarantee security vulnerabilities will be fixed on any timeline or at all.*
+
+== [[tomee-10]]Apache TomEE 10
 
 - Jakarta EE 10
 - MicroProfile 6.0