syncing the CaC releases with the DISA STIG updates

[svet-se]

hey all,

What about syncing the CaC releases with the DISA STIG updates?

For example, DISA releases STIG updates at the end of January, April, July, and October. So, can we start stabilizing the new CaC releases after the 15th of February, May, August, and November?

In this way, the new DISA STIG updates will be part of the new CaC release.

Best regards,
Svetlin Boychev

[dodys]

We already do it: #11278

[svet-se]

IMHO, the particular dates are important, not only the months because otherwise, we will not have such an issue.

[dodys]

that would change the release months
for example, 0.1.77 we already have publishing for may 19th and stabilization starting in may 5th.
Why doesn't that work on your opinion?

[svet-se]

IMHO it will be better to have a little more time between the updates and releases, there could be different use cases:

1. The updates could be published with a delay
2. To have more changes in the updates
3. The particular maintainer is to be on vacation or ill during that period.

[evgenyz]

We are contemplating on widening the gap between STIG updates and release dates. Stay tuned.

[Mab879]

How would the 3rd Monday of the second month of the quarter work?

[svet-se]

It sounds good to me

[Mab879]

With #13119 merged we now in better spot on this. We now start the stabilization on 3rd Monday of the second month of the quarter.