This might seem a dumb question, but I’m looking for a definitive answer regarding package “stability” in the main repositories (main, community).  What I’m looking for specifically is whether or not Alpine will release new versions of stable libraries to old “stable” releases.

This question is effectively split two ways:
Do these packages receive security updates? - I assume they do.
Will entirely new versions of packages get released?

So if I start with alpine 3.12 and “apk add python3 py3-numpy”, is it safe to assume that I will always get the same version of “numpy" (notwithstanding security fixes)?

Thanks

On Wed, 24 Feb 2021 14:58:25 +0000
Philip Couling <couling@gmail.com> wrote:

> This might seem a dumb question, but I*m looking for a definitive
> answer regarding package *stability* in the main repositories (main,
> community).  What I*m looking for specifically is whether or not
> Alpine will release new versions of stable libraries to old *stable*
> releases.
> 
> This question is effectively split two ways:
> Do these packages receive security updates? - I assume they do.

Yes. We provide security updates.

> Will entirely new versions of packages get released?

Depends a bit. We may update the package to a new version if it is
unlikely that the update will break anything. We may backport the
security fix with a patch.

The goal is that you should be able to use a stable branch and not be
afraid of doing `apk upgrade` to get security updates.

> So if I start with alpine 3.12 and *apk add python3 py3-numpy*, is it
> safe to assume that I will always get the same version of *numpy"
> (notwithstanding security fixes)?

At this stage, alpine 3.12 will only get security updates. So you will
always get the same version unless there are security issues (or other
major bugs are reported).

alpine 3.13 may get bug fixes in addition to security fixes, but new
versions are not automatically added to 3.13.

In both cases, you are supposed to be able to `apk add python3
py3-numpy` and be safe that things does not break when you apk upgrade.
We should not push API or ABI breaking changes to stable branches.
(there have been a few exceptions ofc)



> 
> Thanks