Issue #3254615: Logic for determining which security releases should be considered if site has a dev release is installed is untested