VaahCMS and its other first-party packages follow Semantic Versioning. Major platform releases are released every 6 to 8 months, while minor and patch releases may be released as often as every month. Minor and patch releases should never contain breaking changes.
The official away to report the bugs is via github repo.
For all major releases, bug fixes are provided for 1 years and security fixes are provided for 2 years. These releases provide the longest window of support and maintenance.