Skip to content

ops#898 Security upgrade message for sites in EOL and deprecated versions

bgm requested to merge github/fork/agh1/secure-across-versions into master

Created by: agh1

Prior to this change, people in eol or deprecated versions would be told their version is out-of-date, but they would not know there is more recent security release.

This checks if there is a security release more recent than the date of the site's current release.

Two key assumptions here:

  1. Security releases that come out on the same day are equivalent (i.e. there's no urgent need to upgrade from 5.7.6 to 5.13.4).
  2. If a version is marked stable, it will get security releases on its branch, so we don't need to check for more recent security releases on other branches. This is an iffy assumption: sites currently on 5.10.x, 5.11.x, and 5.12.x are all marked stable right now, so there's no indication they're any different than the 5.7 or 5.13 branches. However, that's a different problem to resolve in conjunction with infra/ops#871 and #4.

ops#898 (closed)

Merge request reports