Merge pull request #1890 from riganti/4.3-security-policy

Drop support for 4.1 and 4.0, provide clear support timelines for other versions

SECURITY.md

@@ -2,15 +2,16 @@
 
 ## Supported Versions
 
-When it comes to security updates, we always support the current major version together with the latest preview version.
-Any vulnerabilities that affect older versions will be considered on a case-by-case basis.
+When it comes to security updates, we always support the current stable version together with the latest preview version.
+Each older stable version will continue to be supported for at least one year after the release of the subsequent stable version.
+Any vulnerabilities that affect unsupported versions will be considered on a case-by-case basis.
 
-| Version | Supported          |
-| ------- | ------------------ |
-| 4.2.x   | :white_check_mark: |
-| 4.1.x   | :white_check_mark: |
-| 4.0.x   | :white_check_mark: |
-| < 4.0   | :x:                |
+| Version     | Supported          | Expires         |
+| ----------- | ------------------ | --------------- |
+| 5.0 preview | :white_check_mark: |                 |
+| 4.3         | :white_check_mark: |                 |
+| 4.2         | :white_check_mark: | September 2025  |
+| ≤ 4.1       | :x:                | November 2024   |
 
 ## Reporting a Vulnerability