Questions Regarding F5 Hardened Releases

Hi Team,

I have a few questions regarding F5 Hardened Releases (HR):

1. CVE availability: After a Hardened Release has been available for more than six weeks, can we assume that no CVEs will be published later for that release? Or can security vulnerabilities/CVEs still be disclosed after this period?
2. Upgrade priority: Are all Hardened Releases considered mandatory/high-priority releases, and should we plan to upgrade to the latest HR whenever one becomes available?
3. HR versioning: Will Hardened Releases always follow a naming convention such as HR1, HR2, HR3, etc.?
4. Upgrade path: If we are currently running the base version, can we directly upgrade to the latest Hardened Release? Or is there a specific upgrade path that must be followed (for example, Base → HR1 → HR2 → latest HR)?

Any clarification on the above would be greatly appreciated.

Thanks in advance.