-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hey all,
I'm in the middle of brushing up my understanding of how stable releases work in openstack. It seems we support two releases at the same time - Havana and Icehouse.
For Icehouse, everything is clear - it gets all appropriate bug fixes, including performance improvements, security fixes, failure modes etc.
For Havana, it's not that clear. As per [1], Havana is now in 'Security-supported' mode which is somehow different from 'Current stable release, security-supported' that is Icehouse. My understanding is that it means that only security fixes are allowed to go into the branch now. While we still see other types of patches being merged in stable branches. Those include performance improvements, adoptions to new third-party software, and other nice-to-have patches. My suggestion would be to allow only the following types of patches to old stable branches:
- - security fixes; - - adoptions that fix major breaks with new versions of third-party software we depend on.
So, what's our take on that? Is there any difference in how we consider patches for inclusion between multiple stable branches?
Another thing that is not clear to me is who defines that transition between general stable branch state into 'Security-supported' one. Are there any written rules for that, like binding such transition to trunk milestones?
Alternatively, am I putting too much in that distinction, and all kinds of stable branch appropriate patches belong to both of the branches?
[1]: https://wiki.openstack.org/wiki/Releases
Cheers, /Ihar