Vanilla 2.6 and 2.5.2 are released to open source!
Today we released Vanilla 2.6 gold to open source. That means our open source release is completely up-to-date with what is currently deployed to all our cloud customers. This brings the "Category Following" feature to open source.
We have ALSO released Vanilla 2.5.2 to allow folks to receive security patches if they aren't able to upgrade PHP and get Vanilla 2.6 yet.
The security fixes in both these releases are the cumulative effect of the hundreds of HackerOne issues we received since we launched our campaign publicly on March 2. We don't normally extend support for older releases a la 2.5.2, but the combination of new PHP requirements and number of security issues made this the best course of action today.
More information on the open site: https://open.vanillaforums.com/discussion/36260/vanilla-2-6-is-here-includes-security-fixes