This is a great announcement and topic.
I understand the risk of AI accelerating zero day exploits.
Not in any way underestimating the effort, I wonder if discourse would consider some sort of relative real time CI/CD pipelines for updates?
Maybe this already happens at meta and discourse managed sites, I’m specifically thinking about self hosted where a feature flag could enable updates as released, or on a delay as an automated process.
Or maybe it manifests as an automated security update feature that can be enabled independent of other updates.
Regardless, let me continue to offer my thanks and appreciation for the discourse software and the people behind it. Thank you!