Compatibility between Rebar3 and Erlang/OTP

[kianmeng]

While cleaning up Erlang CI pipeline, I looked for a compatibility table between Rebar3 and Erlang/OTP, but couldn't find one. Therefore, I've compiled the following table based on the release changelog.

Rebar3	Erlang/OTP
3.23.x	25, 26, 27
3.22.x	25, 26, 27
3.21.x	24, 25, 26
3.20.x	23, 24, 25
3.19.x	23, 24, 25
3.18.x	20, 21, 22

Erlang/OTP	Rebar3
27	3.23.x, 3.22,x
26	3.23.x, 3.22,x, 3.21.x
25	3.21.x, 3.20,x, 3.19.x
24	3.20.x, 3.19.x
23	3.19.x
22	3.18.x
21	3.15.x
20	3.15.x

Please let me know if the compatibility table above (not sure which one) is helpful as additional details to the README. I can then draft a pull request.

[paulo-ferraz-oliveira]

This is definitely a plus, I've had this same issue in the past (trying to find a version compatible with a specific Erlang/OTP version range).

[kianmeng]

@paulo-ferraz-oliveira Should we put this compatibility table in https://github.com/erlef/setup-beam instead here?

[paulo-ferraz-oliveira]

If it were just me choosing, I'd prefer to have it here, and then link from the action. As-is, there, we know about compatibility with the targets (mostly OTP) because of the way it's "documented" in the sources.

Edit: if this doesn't move here, or is rejected (either way I'm pretty sure you'll have follow-up) feel free to open an issue there (erlef/setup-beam), for further discussion (I believe we discussed it in the past, but can't remember and a quick search in the issues yielded no interesting results).

[ferd]

I don't see an issue with this.

It might be worth it to make sure the table considers past security issues and does not recommend versions older than these.

Basically, any release older than these are unsafe for any version whatsoever:

• 3.16.1 (Erlang/OTP 22-24)
• 3.15.2 (Erlang/OTP 19-23)
• 3.13.3 (Erlang/OTP 19-22)

So in the tables above. 3.15.x is risky. It should be 3.15.2 explicitly because 3.15.0 and 3.15.1 had major vulnerabilities.

All other versions in the table are above this and not a concern.

[paulo-ferraz-oliveira]

Yeah, the table could be:

rebar3	OTP support range	Notes
3.16.1	22-24	✅
3.15.2	19.23	✅ (note: don't use 3.15.0 or 3.15.1
3.13.3	19-22	✅

[kianmeng]

@ferd @paulo-ferraz-oliveira Sorry, totally forgotten about the discussion. PR submitted, #2918