Added docket tag note to security section (#96725)

Co-authored-by: Isabel Matwawana <76437239+imatwawana@users.noreply.github.com>
pull/96803/head
margotphelps 7 months ago committed by GitHub
parent 33bf94f4d2
commit b69af9240d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 6
      docs/sources/upgrade-guide/when-to-upgrade/index.md

@ -82,7 +82,11 @@ During these times, no scheduled releases will be executed. However, this does n
We've enhanced our naming convention for security release versions to make it easier to clearly identify our security releases from our standard patching releases.
In the past, critical vulnerabilities triggered unscheduled releases that incremented the patch version (e.g., 10.3.0 to 10.3.1). However, we found that the naming convention for these releases didn't clearly communicate the nature of the update. For example, if there was a version change from 11.3.0 to 11.3.1, there was no indication whether it was a security fix, a bug fix, or a minor feature update. This lack of clarity led to confusion about the urgency and nature of the update.
In the past, critical vulnerabilities triggered unscheduled releases that incremented the patch version (e.g., 10.3.0 to 10.3.1). However, we found that the naming convention for these releases didn't clearly communicate the nature of the update. For example, if there was a version change from 11.3.0 to 11.3.1, there was no indication whether it was a security fix, a bug fix, or a minor feature update. This lack of clarity led to confusion about the urgency and nature of the update. <br>
{{< admonition type="note" >}}
Docker does not allow the plus sign (`+`) in image tag names. A plus sign (`+`) will be a rendered as a dash (`-`) in the docker tag.
{{< /admonition >}}
Our new approach directly addresses this issue. Going forward, security releases will be appended with "+security" to indicate that the release is the indicated version PLUS the security fix.

Loading…
Cancel
Save