Early today, ClassicPress 1.0.0-beta2 was released; this is a security release with changes pulled from WordPress 4.9.9, which has the same security fixes as WordPress 5.0.1. ClassicPress has also fixed all known cases of an issue where certain security scanners were incorrectly detecting ClassicPress sites as WordPress 1.0.0.
I’ve upgraded two of my sites to Beta 2 without issue:
You can find more information or download the full release on GitHub.
If you’re on Beta one, you can click the Upload link on your ClassicPress admin section.