Time for release of v0.1.48 is close, so the stabilization branch has been
The release is scheduled to happen at the beginning of next week, at the
latest on 14.02.2020.
Last time we followed approach of merging fixes to the stabilization
branch, and them merge the stabilization branch to master.
But that showed potential to really complicate the merge of the fixes back
This approach also left master hanging out with the bugs discovered during
the stabilization phase until after the release was finished, which is not
So this time we propose to do the fixes on master branch and cherry pick
them to the stabilization branch.
The next version milestone is 0.1.49, please use it when resolving issues
and pull requests from now.
When a PR is cherry picked into the stabilization branch, change the
milestone to 0.1.48, so that it is easy to track in which version a patch
Security Technologies | Red Hat, Inc
recently, the 5000th PR  of the ComplianceAsCode project landed,
proposing the Packit CI support. Packit uses the Fedora spec file ,
i.e. source of the RPM package, in the test process.
The discussion in that PR centered around handling of the spec file - it
now became possible to have it in the repository, syncing it with the
Fedora server, or Packit would pull it from the Fedora repository
whenever it is needed. Both ways have theirs pros and cons, and as you
can read in , some members of the community raised concerns that the
current way of how the spec file is handled encumbers the community.
So if this is also your case, please let us know how having the spec
file upstream would change the situation for you. For the sake of
completeness, nowadays we update the package every time we make an
upstream release, and we issue a build and respective update right after.