> But for less intrusive changes, I personally feel like you can make some minor SemVer transgressions provided... Kind of contradicts "Often, it seems that ve

> But for less intrusive changes, I personally feel like you can make some minor SemVer transgressions provided... Kind of contradicts "Often, it seems that version numbers are incremented by "gut feel" instead of any consistent semantic: "This feels like a minor version update." > The value of MaxBufferSize was adjusted downward to 2048 because we discovered a buffer overflow in a lower level library for any larger buffer size. See issue #4144 Technically it's a major version bump, as I understand it. But security is important, so what should we do here in addition to writing it down as first sentence on release notes? Perhaps having an excuse to potentially break downstream code in the name of security should be OK and well communicated (i.e in readme)?