Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:76704
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.192.49 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <53F29345.40607@sugarcrm.com>
References: <53F29345.40607@sugarcrm.com>
Date: Tue, 19 Aug 2014 14:54:42 +0200
Message-ID: <CAH-PCH7FndL1_wnG0FR1cwC_wRfAim8gCUzcCp-x5SY9yqTcqA@mail.gmail.com>
To: Stas Malyshev <smalyshev@sugarcrm.com>
Cc: PHP Internals <internals@lists.php.net>
Content-Type: multipart/alternative; boundary=001a11c12ce6c623cb0500fafd5c
Subject: Re: [PHP-DEV] 5.4 security only
From: tyra3l@gmail.com (Ferenc Kovacs)

--001a11c12ce6c623cb0500fafd5c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

2014.08.19. 1:59 ezt =C3=ADrta ("Stas Malyshev" <smalyshev@sugarcrm.com>):
>
> Hi!
>
> Moving this out of other topics into its own: according to the release
> RFC, we should have 5.4 have 2 years of bugfixes & one year of security
> fixes. Since 5.4 was released in March 2012, we're already past 2 year
> mark. However, we're still have some bugfixes in 5.4, so I'd like to do
> this:
>
> - 5.4.32 is released as planned this week, nothing changes there.
>
> - 5.4 branch that is to be 5.4.33 will be the last release that has any
> non-security bugfixes. We hope that by the time 5.4.33 is out 5.6.0 is
> out too, so that would play nice with the "two stable branches, one
> security branch" theme. Starting from that release forward, 5.4 would be
> purely security fixes only branch.
>
> - EFFECTIVE IMMEDIATELY, we do not accept new non-security bugfixes into
> 5.4 branch unless they are very important ones (and that is only because
> people may, in theory, have pending patches and we didn't give advance
> notice). Importance would have to be determined somewhat arbitrarily,
> but basically if it works without it, then it's not in, if there's
> serious doubt if it should be in, it's not in, etc. Security issues, of
> course, still allowed in.
>
> This means if somebody has some pending non-security fixes that have to
> be in 5.4, the following two weeks are the last call, provided that the
> fixes really must be in 5.4.
>
> Any objections/suggested modifications to this plan?

Nope, I think it is a good plan.

--001a11c12ce6c623cb0500fafd5c--