Skip to content

Conversation

@SuperQ
Copy link

@SuperQ SuperQ commented Apr 4, 2025

  • Update CI to test all latest versions.
  • Bump GitHub actions and pin versions for supply chain security.
  • Enable dependabot to update GitHub actions.

@SuperQ
Copy link
Author

SuperQ commented Apr 4, 2025

👓 @dormando

@dormando
Copy link
Collaborator

dormando commented Apr 4, 2025

I'm (personally) very conservative when bumping minimum versions for things. Can you add justifications for it in the commits/PR at least? Maybe separate it out if it's not necessary?

@SuperQ
Copy link
Author

SuperQ commented Apr 4, 2025

I've also tried to be more conservative about bumping minimum versions. But the Go upstream only supports the latest 2 releases.

So I typically recommend most libraries follow this policy.

But I'm happy to increase the support window here.

* Update CI to test all latest versions.
* Bump GitHub actions and pin versions for supply chain security.
* Enable dependabot to update GitHub actions.

Signed-off-by: SuperQ <superq@gmail.com>
@dormando
Copy link
Collaborator

dormando commented Apr 4, 2025

Thanks! we can tighten that later once I better understand the userbase. memcached has a lot of users with fairly static environments (from bureaucracy or lack of time) but they sometimes need to urgently get a bug fixed.

@dormando dormando added this to the Minor / misc milestone Apr 4, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants