Clarity on support for older versions

[captn3m0]

Filing this on behalf of endoflife.date, where we are working on a page for Sourcegraph. See PR and Preview. Feedback on the PR is welcome!

With #6828, the Support for older versions says:

As such, we offer support for the latest version (N) and its previous major version (N-1)

Some clarity on what does not come under this support is there:

1. No bug fixes or improvements are backported.
2. Issues that can be resolved with an upgrade are ignored.
3. Issues caused by using an outdated version are ignored.

It is however unclear what is offered under support? In particular:

1. Are security fixes backported? Scanning sourcegraph/sg:209411_2023-03-22_4.5-e6f7c139808f, the latest 4.x docker image reports "10 critical, 48 high" vulnerabilities, so it seems no?
2. What counts as "outdated version" in (3) above? Would 4.5.1, the latest 4.x release count as outdated?
3. What else is offered under support?

[Alexm0812]

I can confirm no security or bug fixes are done for older versions. “For older versions of Sourcegraph, the primary support offered involves assistance with upgrading to a supported version. While Sourcegraph does not backport bug fixes or improvements to older versions, the team encourages users to update to the latest versions to benefit from new features and fixes. This approach ensures users have the most secure and efficient version of the software, but specific help for outdated versions, beyond upgrade guidance, may be limited.”

[captn3m0]

@Alexm0812 Is that a quote from a Sourcegraph communication?