From caaa0670961d1eef7a346d95596ebf58d7886175 Mon Sep 17 00:00:00 2001 From: Ryan Date: Tue, 4 May 2021 13:30:17 +0100 Subject: [PATCH 1/2] Update Security Matrix (#59) * Update Security Matrix Updating the full security matrix. * Yay for consistency * I hate Markdown / Markup / Whatever the fuck this is. --- SECURITY.md | 36 ++++++++++++++++++++++++++---------- 1 file changed, 26 insertions(+), 10 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index bd1a82e7..12dab535 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -2,18 +2,34 @@ ## Supported Versions -We currently support the code running on the "development" branch of this repository. This is supported in addition to those formal releases, but note anything not yet released should be treated as in-development. +We currently support the code running on the "main" branch and "development" branch of this repository. This is supported in addition to those formal releases, but note anything not yet released should be treated as in-development. -In terms of plugin releases, we support the following versions: +In terms of plugin releases, our support matrix is as follows: -| Version | Supported | -| ------------------- | ------------------ | -| 2021.04 | :white_check_mark: | -| 2021.02 | :white_check_mark: | -| 2020.11 | :white_check_mark: | -| 6.0.x (Pre-Release) | :x: | -| < 2020.11 | :x: | -| < 5.x | :x: | +### Actively Supported +These versions are currently actively supported by our team, and you should expect security patches where appropriate for these versions. + +| Version | Supported | Support End: | +| ------------------- | ------------------ | ------------------------------ | +| 2021.05 | :white_check_mark: | No Earlier than August 2021 | + +### Legacy Supported +These versions are no longer under active development, however we will look to release critical secuirty patches where appropriate. + +| Version | Supported | Support End: | +| ------------------- | ------------------ | ------------ | +| 2021.04 | :white_check_mark: | July 2021 | +| 2021.02 | :white_check_mark: | June 2021 | + +### No Longer Supported +These versions are no longer supported at all. It is strongly advised to update if you are running any of these versions. + +| Version | Supported | Support Ended: | +| ------------------- | ------------------ | ------------------- | +| 2020.11 | :x: | 3 May 2021 | +| 6.0.x (Pre-Release) | :x: | December 2020 | +| < 2020.11 | :x: | December 2020 | +| < 5.x | :x: | December 2020 | ## Reporting a Vulnerability From 4e577f97fac1e7837af821890e9a75a88170aaba Mon Sep 17 00:00:00 2001 From: Ryan Date: Fri, 28 May 2021 15:22:07 +0100 Subject: [PATCH 2/2] Enable downward Sync from main (#60) We want to make sure anything on the main branch which is commited makes it's way down to the dev and other branches. --- .github/workflows/downstream.yml | 43 ++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 .github/workflows/downstream.yml diff --git a/.github/workflows/downstream.yml b/.github/workflows/downstream.yml new file mode 100644 index 00000000..523e8143 --- /dev/null +++ b/.github/workflows/downstream.yml @@ -0,0 +1,43 @@ +# This is a basic workflow to help you get started with Actions + +name: Downstream Branch Updates + +on: + schedule: + - cron: '20 7 * * *' + # scheduled at 07:00 every Monday and Thursday + + workflow_dispatch: # click the button on Github repo! + + +jobs: + sync_with_upstream: + runs-on: ubuntu-latest + name: Sync main with upstream latest + + steps: + # Step 1: run a standard checkout action, provided by github + - name: Checkout main + uses: actions/checkout@v2 + with: + ref: main + # submodules: 'recursive' ### may be needed in your situation + + # Step 2: run this sync action - specify the upstream repo, upstream branch to sync with, and target sync branch + - name: Pull (Fast-Forward) upstream changes + id: sync + uses: aormsby/Fork-Sync-With-Upstream-action@v2.1 + with: + upstream_repository: AtlasMediaGroup/TotalFreedomMod + upstream_branch: main + target_branch: main + git_pull_args: --ff-only # optional arg use, defaults to simple 'pull' + + # Step 3: Display a message if 'sync' step had new commits (simple test) + - name: Check for new commits + if: steps.sync.outputs.has_new_commits + run: echo "There were new commits." + + # Step 4: Print a helpful timestamp for your records (not required, just nice) + - name: Timestamp + run: date