Skip to content

Mark Wicket 9.x and 8.x as discontinued in the security policy - #1729

Merged
dashorst merged 1 commit into
apache:masterfrom
dashorst:security-md-eol-8-9
Oct 29, 2026
Merged

dashorst merged 1 commit into
apache:masterfrom
dashorst:security-md-eol-8-9

Conversation

@dashorst

Copy link
Copy Markdown
Contributor

Wicket 9.25.0 and 8.20.0, released on 29 October 2026, were the final releases of both lines, so SECURITY.md should no longer list them as receiving security fixes.

  • The version table folds 9.x and 8.x into the discontinued row (≤ 9.x).
  • A finding is verified against the tip of wicket-10.x or master only.
  • Deprecation is judged per line for 10.x alone.
  • The paragraph on 8.x lacking a resource isolation implementation goes, since all of 8.x is now out of scope.
  • The status link points to https://wicket.apache.org/versions/; start/download.html only redirects there.
  • AGENTS.md names wicket-10.x as the one maintained release line.

The same table change is already on wicket-10.x, wicket-9.x and wicket-8.x.

🤖 Generated with Claude Code

Wicket 9.25.0 and 8.20.0, released on 29 October 2026, were the final
releases of both lines, so they no longer receive security fixes. The
version table folds them into the discontinued row, a finding is
verified against wicket-10.x or master only, deprecation is judged per
line for 10.x alone, and the paragraph on 8.x lacking a resource
isolation implementation goes, since all of 8.x is now out of scope.

The link for the status of each line points to the releases page;
start/download.html only redirects there. AGENTS.md names wicket-10.x
as the one maintained release line.

Generated-by: Claude Code (Claude Opus 5.5)
@dashorst
dashorst merged commit 75ba768 into apache:master Oct 29, 2026
3 checks passed
@dashorst
dashorst deleted the security-md-eol-8-9 branch October 29, 2026 23:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant