First of all, this is by no means a rant or complain
When a new release for example gvmd 8.0.1 is “frozen”, and a bug shows up afterwards.
There is no clear way to patch the release version, atleast no way that I have found?
If it was possible, it would be great to have the option to patch against the released version without cherry picking from master.
Perhaps I’ve missed something, or just don’t understand how to do it right
all fixes are put into the corresponding release branches. We are maintaining the branches until our product based on these branches is End-Of-Life. The fixes should also be mentioned - with their corresponding PR - in the CHANGELOG.md files. So you should not be required to cherry pick from master branches. Just follow the release branches e.g. gsa-8.0.
The release tar gz is created from the corresponding release branch. It contains the same source code as the tag. E.g. current gsa-8.0 contains v8.0.0 and v8.0.1 releases of GSA.
There is no 8.0.1 branch and will never be one. This is a version tag where one version is tagged to a specific commit, this is freezed and will never change.
The first won’t receive the mentioned fix, the latter has it already included. Depending on the development team a new version tag v8.0.2 will be created on the current state of the gvmd-8.0 branch and afterwards new fixes will be added on top of that which might get v8.0.3 in the future.