Prior to a v1.0.0 release, we follow a single linear development stream. Only the most recent minor version is supported.

While a minor version is current (e.g., v0.4.x), it may receive patch updates (e.g., v0.4.1). However, as soon as a new minor version is released (e.g., v0.5.0), all previous minor versions (e.g., v0.4.x) are immediately considered end-of-life and will no longer receive security or bug fix updates.

Currently, we provide security updates for the following versions:

We take the security of the Agent Dashboard seriously. If you believe you have found a security vulnerability, please do not report it via a public GitHub issue. Instead, please follow this process:

1. Private Disclosure: Email your findings to agent-dashboard-security@redshade.net.
2. Acknowledgement: You should receive an acknowledgement of your report within 48 hours.
3. Validation: We will investigate the report and determine if it is a valid vulnerability.
4. Resolution: If valid, we will work on a fix. We may contact you for further information or to test the proposed fix.
5. Public Disclosure: Once a fix is released, we will coordinate a public disclosure. We ask that you do not disclose the vulnerability publicly until a patch is available and has been announced.

Thank you for helping keep the Agent Dashboard secure!