Previously, whenever a commit described a vulnerability, it could stay public for days until the patched build was available to everyone. On top of that, our pipeline ran across GitHub and our own infrastructure at the same time, so a GitHub outage could stop our releases even when nothing was wrong on our end. Keeping the two in sync was maintenance work that didn’t benefit users, and the split between them slowed us down. It also created internal communication overhead that affected the speed at which we developed the application.
For these reasons, instead of continuous commits, the repository will receive the full source as a snapshot at each release, roughly once a month. Issues and pull requests will stay on GitHub. Open a PR, and we will review it there. Merged work will ship in the next release with your name on it. The issue tracker will remain open, and we appreciate any input from the community.
