Our stance is to keep ESRs patched with security fixes while it’s supported. v2026.1.x is still supported til the end of this month, so it should get one more batch of patches.
v2026.1.8 is available: v2026.1.8 Changelog | Discourse Releases
Understood. We plan on sticking with ESR versions. Now that the next ESR version, we are upgrading to v2026.7.2 with how many vulnerabilities that are resolved in that version. When it comes to dependency upgrades, will those be applied to the ESR version as well? Or is it more of a case by case basis depending on big of a change it is and how it affects functionality?
In general, it’ll be taken as a case-by-case basis - Not sure if you’re talking specifically about the underlying image libs, or gems