It needs to point to the latest 2.x.x tag (v2.6.1 right now). And we need to add the same semantic-release setup there in order to automate maintenance 2.x releases. Breaking changes are not allowed in the 2.x branch.