SMF released a new version a couple of weeks ago. I've pushed the changes to
our upstream branch on GitHub, but after reading through them and the changelog, I've decided not to upgrade.
That diff should speak for itself, but in case it doesn't, it contains at least as many (probably accidental) reversions and errors as improvements, and there are no security fixes to worry about. Until SMF makes another release that is actually going to be beneficial to us, we're better off sticking to 2.0.7 with our own improvements.