On 2023-10-14, @Zackster said this on the CFML slack:
please avoid 5.4.3.16 for now.
No further elaboration than that.
I queried this:
Am a bit bemused by this.
There’s some point in the future where 5.4.3.16 will be fine?
Or is it more a case that there’s an issue with 5.4.3.16, and there’ll be a 5.4.3.17 which will address whatever that is?
Or is the nature of the issue not something that would require changes to 5.4.3.16, so that it’ll… be OK… after some point?
To date: no response. And 5.4.3.16 seems to still be the most recent version of 5.4, based on this:
curl -s https://hub.docker.com/v2/repositories/lucee/lucee/tags/?page_size=10000 | jq -r '."results"[]["name"]' | grep -E "5\.4\.[0-9]+\.[0-9]+-nginx$"
5.4.3.16-nginx
5.4.3.15-nginx
5.4.3.2-nginx
But the UI on Docker Hub is saying 5.4.1.8 is the latest stable release:
Latest stable release (5.4)
Tomcat 9.0 with Java 11 (recommended)
5.4.1.8-tomcat9.0-jre11-temurin-jammy,5.4.1.8,5.4,latest(Dockerfile)
**5.4.1.8-nginx-tomcat9.0-jre11-temurin-jammy,5.4.1.8-nginx,5.4-nginx(Dockerfile.nginx)
This is almost certainly just a case of the page not being maintained, I get that.
Looking at the Tags tab, and filtering the images, it seems like 5.4.3.16 is the highest tag without “snapshot”.
So… what’s the story here? I’m not the only one asking on either of the Slack threads I’ve started about this.
It seems to me like the latest “stable” 5.4.x release is actually dubious (in some way that has not been explained).
I don’t think I’m being churlish to think this really oughtn’t be a tricky question to answer? Is it a case that no-one actively participating in the Lucee project is paying attn to that Slack channel any more? If so: that would be good to know too. And it’s fine, we can shift to here.
Can we pls get some clarification on what version of 5.4 we should be looking to run in prod ATM?
Cheers.