Skip to content

docs: list 0.9.x as supported - #2217

Closed
nightcityblade wants to merge 1 commit into
unclecode:developfrom
nightcityblade:docs-security-supported-versions
Closed

nightcityblade wants to merge 1 commit into
unclecode:developfrom
nightcityblade:docs-security-supported-versions

Conversation

@nightcityblade

Copy link
Copy Markdown
Contributor

Summary

Add the current 0.9.x release line to the security policy's supported-version table while retaining support for 0.8.x.

Fixes #2216

List of files changed and why

  • SECURITY.md — list the current 0.9.x stable line as supported.

How Has This Been Tested?

  • git diff --check
  • A targeted Python check verified that the major/minor line in crawl4ai/__version__.py has a supported row in SECURITY.md.

Checklist:

  • My code follows the style guidelines of this project
  • I have performed a self-review of my own code
  • N/A — this documentation-only change has no code requiring comments
  • I have made corresponding changes to the documentation
  • N/A — no unit-testable runtime behavior changed
  • N/A — the targeted documentation checks pass; existing unit tests are unaffected

@SohamKukreti SohamKukreti left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR! One change please: 0.8.x should be marked as not supported.

The 0.9.3 release (2026-08-31) fixed five advisories (GHSA-q5rj-45vw-vp2g, GHSA-v2rm-hvrj-2x9q, GHSA-7g3g-vhm6-79f3, GHSA-xpp7-j28w-2gvx, GHSA-m446-hp3q-qfxp). None of them were backported to 0.8.x, and the last 0.8.x tag (v0.8.9) predates 0.9.0. So 0.8.x has known unpatched issues and the fix is to upgrade.

This also matches how the table was written originally: only the newest minor line is supported, the previous one says "upgrade recommended".

Otherwise, LGTM 👍

Comment thread SECURITY.md Outdated
| Version | Supported |
| ------- | ------------------ |
| 0.9.x | :white_check_mark: |
| 0.8.x | :white_check_mark: |

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

0.8.x should be marked as not supported as it has known known unpatched security issues which have been fixed in 0.9.0+ releases.

@nightcityblade
nightcityblade force-pushed the docs-security-supported-versions branch from 2cb2d12 to bc59eee Compare September 15, 2026 15:03
@nightcityblade

Copy link
Copy Markdown
Contributor Author

Updated the table as requested: 0.9.x is supported, while 0.8.x is marked unsupported with an upgrade recommendation. Thanks for clarifying.

@nightcityblade

Copy link
Copy Markdown
Contributor Author

The replacement PR with the requested update is #2269. It preserves the original one-commit, one-file scope.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants