web-auth / webauthn-framework

FIDO-U2F / FIDO2 / Webauthn Framework
MIT License
381 stars 51 forks source link

Supported versions? #574

Closed reedy closed 3 months ago

reedy commented 4 months ago

Description

I can't see it anywhere obvious at least, as to which versions of this framework are still supported.

Is 3.x considered EOL? Or would bug reports (and/or security reports) be accepted?

The reason I ask, is potentially wanting to backport a couple of changes from 4.x into 3.x, but whether they'd be accepted (and ideally, released for use) is unclear.

Thanks!

Spomky commented 4 months ago

Hello @reedy,

Supported versions are mentioned in the security page. Indeed, 3.x is not maintained anymore. However, security reports are always welcomed, even on old releases.

reedy commented 4 months ago

https://github.com/web-auth/webauthn-framework/security/policy#supported-versions -> https://github.com/web-auth/webauthn-framework/blob/4.8.x/RELEASES.md

I somehow managed to miss that!

Can we get it linked from the main readme, so it's more obvious? 👍 Happy to do a PR for it later on

Spomky commented 3 months ago

Hi,

I updated the README page that the supported versions has a dedicated section. I close this issue. Feel free to reopen if necessary.

Regards.

reedy commented 3 months ago

Perfect, thanks!

github-actions[bot] commented 2 months ago

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.