...
- When a serious security issue arises, we should try to create a
STRUTS#STRUTS_#_#_#_X
branch from the last GA release (from tag), and apply to that branch only
the security patch. - If the patch first applies to some other dependency, implore the other group to do the same, to avoid side-effects from other changes.
- Release the upcoming version in JIRA (under Administration/Manage Releases) and tag the release date
- Create DONE and TODO filters for the new version, share with all, and remove obsolete TODO filter
- Create a new Version Notes page in Confluence, link from Migration Guide, and link to prior release page and JIRA DONE filters of the version to release
...