I think some of the issues could have been avoided here, if they would not chase the PR and blog posts.

What's the "other way" that would be better in general?

	▲	Avamander 3 hours ago \| parent \| next [-]
		The release should've been done sooner once it was clear the embargo was broken and people figured out the vulnerability.
	▲	nicce 3 hours ago \| parent \| prev \| next [-]
		Some issues covered here: https://thephp.foundation/blog/2026/10/21/todays-php-securit...
	▲	pamcake 3 hours ago \| parent \| prev [-]
		More proactive outreach and better coordination with key downstreams.