v0.4.3 changelog, update CVE response policy

This commit is contained in:
2026-06-14 01:02:03 +02:00
parent 9e62b822e7
commit f1e56d083a
2 changed files with 3 additions and 2 deletions
+1 -1
View File
@@ -12,7 +12,7 @@ maintainer becomes unavailable.
| Code review | All changes pass through CI (`cargo check`, `cargo test`, `cargo doc`). Human review is performed by the maintainer before signing. |
| Release | Signed GPG tag by the maintainer. No automated tag creation. CI builds, packages, and attaches provenance. |
| Policy documents | Maintainer drafts. Significant changes are committed with justification in the commit message. |
| Security issues | Reported via email. Patched within 48 hours. Disclosed publicly after patch release. |
| Security issues | Reported via email. Patched within 14 days for serious issues, 90 days for standard. Disclosed publicly after patch release. |
## Maintainer