Re: rails security update policy

[Moritz Mühlenhoff <jmm@inutil.org>]

On Mon, Dec 01, 2025 at 09:42:10PM +0100, Bastien Roucaries wrote:
> Le lundi 1 décembre 2025, 20:35:16 heure normale d’Europe centrale Moritz Mühlenhoff a écrit :
> > On Sun, Nov 30, 2025 at 07:03:32PM +0100, Bastien Roucaries wrote:
> > > Hi,
> > > 
> > > What is the rails security update policy ?
> > > 
> > > Should I backport patches individually or should we update to last stable sub version ?
> > 
> > For rails it's fine to follow the releases (for as long as they are
> > supported and then we move on to cherrypicking patches)
> Ok so:
> - for trixie I will do a sid backport
> - backport for unsupported bookworm

Sounds good! Thanks.

Cheers,
        Moritz