Security Patch 13.7
# help-with-umbracot
tekoScott
02/03/2025, 4:52 AMHi all,
I've noticed that there is another security patch scheduled for Feb 27, a month after 13.6 has been released. Is this just a one off or are Umbraco changing to a monthly release cycle.
s
Sebastiaan
02/03/2025, 8:27 AMI don't see a security patch anywhere? In any case security patches are always one-offs - we fix what comes in when it comes in and release ASAP.
13.7 is also not a security release and not part on a monthly release cycle, v13 releases come out when we have things to release. Other than that it is in the support phase, which does not have a regular release cadance.
The reason there's a few v13 release close together at the moment is because the team has been working on a big catch-up on the issue tracker trying to fix any relevant outstanding issues. These last few issues didn't fit into the 13.6 release as the current team cycle ended with the 13.6 release, so the rest shifted to the next cycle for the team.
l
Luuk Peters (ProudNerds)
02/03/2025, 9:08 AMTo be fair, when looking at 13.5 and 13.6, it's almost exclusively fixes, which makes sense in the support phase, but makes less sense SemVer wise. I would expect new non-breaking features in a minor version. If it's just fixes, it could just as well be a patch version.
s
Sebastiaan
02/03/2025, 10:04 AMThis is fair for 13.7, I agree. I'll feed it back to the team!
Sebastiaan
02/03/2025, 10:39 AMJust some clarification from the CMS team lead:
> Arguably the 13 releases could be patches - they are just bug fixes. But:
>
> There are quite a lot.
>
> - Some "fixes" involve new settings etc. which start to blur into becoming features.
> - I've noticed in CMS we've tended to reserve patch releases for a) security or b) specific fixes to regressions from the last minor. What we are doing now isn't either of those.
> - So given that it felt more aligned to call them minors.
Additionally, I should note that 13.7 is not "done" yet, so small features might still make their way in anyway.
j
Jason
02/03/2025, 8:23 PMUmbraco? Not following SemVer?
Perish the thought 🙄
Jason
02/03/2025, 8:39 PMI guess v13 is a bit different - the feature-frozen backoffice limits the kinds of features that can go into it so we're likely to see fewer meaningful features in point releases.
Minor releases are scheduled, which I think makes sense - Umbraco accrues a lot of bugfixes/small QoL commits that don't make sense as patches in their own right but don't want to wait 6 months to be released.
t
tekoScott
02/03/2025, 9:34 PM@Sebastiaan Apologies. Did not mean to say Security Patch. In any case thanks for the background information regarding the 13.6 - 13.7 release.
s
Steven (he/him)
02/04/2025, 7:23 AMMe here thinking there was a security patch I wasn't aware of 👀😂
4 Views