Release & security

During the 0.86.2 prerelease line latest follows the newest complete, verified RC only after the owner moves it for all four packages, so it can lag next, and it moves to the stable version at the 0.86.2 stable promotion; the last observed latest target is recorded in docs/dist-tag-policy.md.

Use @next or pin the exact release-candidate version while evaluating this release candidate — see Start for the full install command per platform (Expo, bare React Native, Web).

A green verification matrix, package publication, and a latest move are separate release events. The current RC was published only after owner approval, latest moves only after the owner verifies the complete four-package set, and stable 0.86.2 still requires its own release and promotion gates.

The machine-checked channel authority is docs/dist-tag-policy.md, and the evidence/process authority is docs/release.md.

Prerequisites: none — this page states current publication/security facts, it is not a setup step.

Report a security issue

Do not open a public issue containing vulnerability details. Follow the repository’s public SECURITY.md reporting path. Only the intended public reporting instructions are reproduced here; maintainer/private response workflows stay out of the website.

BeeUI is MIT licensed; see LICENSE.