3 ms·
And when you actually need a super hot fix for a 0-day, you will need to revert this and keep it that way for some time to then go back to minimum age. While t
by dt3ft 6mo ago
And when you actually need a super hot fix for a 0-day, you will need to revert this and keep it that way for some time to then go back to minimum age.
While this works, we stillneed a permanent solution which requires a sort of vetting process, rather than blindly letting everything through.
- cortesoft 6mo agoWho will do the vetting process?
- password4321 6mo agoI think my vetting would settle for a repo diff against the previous version, confirming the only difference was the security fix (though that doesn't cover all the bases).
- pvillano 6mo agoJia Tan
- matijs 6mo agopnpm since v10.19.0 allows excluding specific dependencies from minReleaseAge by version.