Hi JB, I believe the outcome of the discuss thread (and also what Matt sent out by email) was that the plan was to support it for another 6 months and to backport important fixes (like security issues) so we should probably keep it enabled.
There needs to be at least more release done or sure to fix a couple regressions found with MQTT and the advisory support that was found, and given all the AI generated security reports that have hit the open source world over the last several months I'd expect more releases. I think we could turn down the frequency of the updates, maybe run it once a week or something like that. It makes sense to stay up to date though, the best we can, if we are going to run releases. Chris On Thu, Sep 10, 2026 at 1:37 PM Jean-Baptiste Onofré <[email protected]> wrote: > > Hi everyone, > > A while ago, I configured Dependabot to run on the 5.19.x, 6.3.x, and > main branches. > > Given the recent discussion regarding 5.19.x and the fact that we do > not plan to make new releases on the activemq-5.19.x branch (unless > requested by the community), I am wondering if we should keep > Dependabot enabled for it. > > What are your thoughts? > > Regards, > JB > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > For further information, visit: https://activemq.apache.org/contact > > --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected] For further information, visit: https://activemq.apache.org/contact
