Skip to main content

CAP.L0.RULE_WITHHELD_BY_VERSION — a rule was not applied because of the server version

  • Category: safety
  • Level: 0
  • Stability: stable
  • Suites: audit

A rule declares the server versions it can reason about. This one was outside that window for the server that answered, so it did not run.

Why a notice rather than a silent skip

Because the report would otherwise be shorter and still entirely true. Every finding in it would be correct; the only thing missing would be any indication that a check had been skipped. That is the silent green in its purest form — a report that is not wrong about anything it says, and is wrong about what it covers.

The two shapes this takes

  • A known version outside the rule's window. The rule genuinely cannot apply; the notice records which rule and which window.
  • An unknown version. A version-independent rule still runs. A version-dependent one is withheld rather than guessed at, because guessing goes wrong in both directions — applying a rule the server cannot support, or silencing one it needs.

What to do

Usually nothing: a rule about a feature your server does not have is correctly withheld. If the version is unknown and should not be, the run header states where the version came from, and assume_server_version is how a lint run over files pins one deliberately.