SECURITY.md

Jdbi encourages users to upgrade to thelatest version.

Only the latest released version of Jdbi is actively supported. When reporting bugs or security issues, we encourage you to first upgrade to the latest version and confirm that the problem still exists.

We patch bugs and security relevant issues in the latest version and recommend upgrading. Jdbi goes to great length to ensure backwards compatibility so upgrading is almost always painless.

The current version of Jdbi requires Java 11 or better.

We will backport security fixes if needed to thelast version that supports Java 8.

Historically, we have maintained a cadence of a release about every four weeks. The actual release cadence will depend on whether we have specific bug reports or new features that we want to release.

Security vulnerabilities should be reported by drafting aSecurity Advisory directly on github.

There aren’t any published security advisories