We see many CVEs in our scanning tool of choice. We also see many dependabot patches being merged which resolve some of them. However, without a new release, these dependabot patches are not shipped / usable.
It would be good to up the release cadence in order to be more up to date with the patches.
Message from the maintainers:
If you wish to see this enhancement implemented please add a 👍 reaction to this issue! We often sort issues this way to know what to prioritize.
We see many CVEs in our scanning tool of choice. We also see many dependabot patches being merged which resolve some of them. However, without a new release, these dependabot patches are not shipped / usable.
It would be good to up the release cadence in order to be more up to date with the patches.
Message from the maintainers:
If you wish to see this enhancement implemented please add a 👍 reaction to this issue! We often sort issues this way to know what to prioritize.