I am a volunteer working for a charity. OpenProject had been used for some time but the person who installed it and who maintained it left long ago. The installation is package-based under Ubuntu. No updates have been applied to the system, or OpenProject, for a long time.

We're running:

Ubuntu 20.04 LTS
OpenProject 12.4.1
PostgreSQL 13.9

As you'd expect the OP installation is marked as vulnerable, I'm sure the OS is, too, due to the lack of maintenance.

Running apt update generates messages that the  OP repository has changes its Origin and Label values, and I'm asked whether to accept the changes. I did try this and allow all updates but, not surprisingly, OP would not run at the end.

I tried creating a backup and applying it to a new instance of OP but many validation errors resulted.

The system is running on Amazon LightSail so I can create test instances from a snapshot easily. My question: how do I approach getting OpenProject up to a safe, supported release?

Thank you.