### Motivation:
To give up-to-date guidance on submitting security vulnerabilities.
### Modifications:
Updated the Disclosures section of SECURITY.md
### Result:
More accurate guidance on submitting information on security
vulnerabilities.
* Bump minimum Swift version to 5.7
Motivation:
Now that Swift 5.9 is GM we should update the supported versions and
remove 5.6
Modifications:
* Update `Package.swift`
* Remove `#if swift(>=5.7)` guards
* Delete the 5.6 docker compose file and make a 5.10 one
* Update integration test script
* Update docs
Result:
Remove support for Swift 5.6, add 5.10
* fix indentation issues
* 5.9 docker image use release image
Motivation:
SwiftNIO periodically drops support for older Swift versions. Now that
5.7 has been released, 5.4 will be dropped.
Modifications:
- Remove 5.4 specific Package.swift and docker-compose
- Update the 5.7 docker-compose to use the released 5.7 and move from
focal (2004) to jammy (2204)
- Remove unused swiftformat from Dockerfile
- Update tools version in syscall wrapper tests to 5.5
- Update docs
Results:
Minimum Swift version is 5.5
* Drop support for 5.2 and 5.3
As outlined in a [Swift forums post in November ’21](https://forums.swift.org/t/swiftnio-swift-version-support/53232), SwiftNIO will only support the latest non-patch Swift release and the 2 immediately prior non-patch versions.
In this commit we drop support for Swift 5.2 and 5.3. We update CI for Swift 5.4 to run on bionic instead of focal to ensure that we still test bionic.
* Added Versions paragraph to Security document
* Apply suggestions from code review
Co-authored-by: Cory Benfield <lukasa@apple.com>
Co-authored-by: Cory Benfield <lukasa@apple.com>
Motivation:
@tomerd made this suggestion but it was missed in the previous PR.
Modifications:
- Use 'sswg-security-reports' as the recipients are more relevant to
this project
Motivation:
Security is hugely important to us and our users yet we don't provide
guidelines on how users should report vulnerabilities to us, nor any
commitments we make to resolve these issues.
Modifications:
- Add SECURITY.md detailing how to report vulnerabilities and what
happens when one is reported.
Result:
It's easier for users to report vulnerabilities to us.
Co-authored-by: Cory Benfield <lukasa@apple.com>
Rick Newton-Rogers
LamTrinh.Dev
Konrad `ktoso` Malawski
Rick Newton-Rogers
David Nadoba
George Barnett
Fabian Fett