diff --git a/cc-ci-plan/upstream/mattermost-lts.md b/cc-ci-plan/upstream/mattermost-lts.md index f4e4145..cbc053a 100644 --- a/cc-ci-plan/upstream/mattermost-lts.md +++ b/cc-ci-plan/upstream/mattermost-lts.md @@ -76,6 +76,16 @@ The previous inline-label approach (no restore hook) was a defect: raw PGDATA restore without a reload was a silent no-op. Fixed in PR #2 (restore fix cherry-picked from PR #1 ci/pg-restore). + - **2026-08-21 re-check** (endoflife.date/api/mattermost.json 2026-08-17; Mattermost docs; GitHub): + **11.7 ESR is the only current ESR/LTS** — latest patch **11.7.9** (2026-08-13, "Low to High + security fixes"), EOL 2027-05-15. **10.11 ESR ENDED 2026-08-15** — upstream main still pins + 10.11.22 (now on an EXPIRED ESR). 11.10/11.9/11.8 are innovation (EOL 2026-11-15/10-15/09-15), + NOT LTS. The `-lts` recipe must track 11.7. This run **redirects open PR #2 away from the + innovation 11.10.0 onto 11.7.9** (the correct LTS/ESR; ESR→ESR 10.11→11.7 is "fully supported + and tested" per Mattermost docs — no staging hop). Refer to the 2026-08-15 report where PR #2 + was on 11.10.0 (operator chose innovation line that week); operator should now decide the + `-lts` line. postgres 15-alpine still HELD (DB-major out of scope). + ## NVD CPE fallback This project publishes nothing machine-readable we can reach — no GitHub advisory feed, no release-attributable changelog — so its CVE count was `?` (nothing measured). NVD is