According to https://spring.io/projects/spring-boot#support, OSS support for Spring boot 2.7.x has reached "End of support" on 2023-11-24 which is according to Spring boot support policy. However, from this link, I believe "End of life" is different from "End of support" and each Spring Boot releases are usually marked end of life 27 months after they were released.
Going by this "End of life" for Spring boot 2.7.x will be some where in Aug 2024. I know it is always better to upgrade to latest version, but we have dependency on Java 8 and cannot immediately move to latest version of Spring boot because of this dependency. Could you please confirm if we get maintenance releases on top of Spring boot 2.7.x for critical bugs and security issues?
Comment From: bclozel
Spring Boot 2.7.x is out of OSS support. It is not end of life as commercial support is still ongoing for this generation. You should not expect maintenance releases for 2.7.x unless you have subscribed to commercial support.
Thanks!
Comment From: premkumarjayarampkj
Hi, I have a similar concern, so I am adding comment seeking for clarification even though it is closed. Would appreciate your help on this!!
The above comment says
Spring Boot 2.7.x is out of OSS support. It is not end of life as commercial support is still ongoing for this generation. You should not expect maintenance releases for >2.7.x unless you have subscribed to commercial support. Does it mean that any version of Spring Boot (non commercial) that crossed beyond the OSS support period will not get any fixes for CVE or any major security issues (not expecting regular maintenance kind)? It took good time to move from 2.7 to 3.0 and by the time I did it, 3.x reached end of OSS support.
What's really confusing is that https://tanzu.vmware.com/support/oss says that any major release will be supported for 3 years from when the initial release was made. If I go by that, then V3.0 should be supported till 2025 right!!
Thanks, -Prem
Comment From: wilkinsona
3.x is a major release with 3.0, 3.1, and 3.2 being the minor releases thus far. To be supported for 3 years you have to track the minor releases. Each minor is supported for at least 12 months.
Comment From: amardeep2006
Hi @wilkinsona I support a critical project that has close dependency to Springboot open source support . I am preparing the strategy till 2029. Currently the project is on Springboot 3.3.3 . I update even patches as soon as available.
Can I get a rough date by which we can assume spring boot 4.0.0 to be available ? Can I assume following : 1. Last minor release (with open source support) of 3.x series (3.6) will launch in Nov2025 which will get patches till Nov 2026 . 2. Spring boot 4.x will get first release in May 2026.
Apologies for replying on close thread. Any help highly appreciated.
Comment From: bclozel
@amardeep2006 we don't have that information right now. We will publish it on https://spring.io/projects/spring-boot#support as soon as we have concrete plans.
Comment From: amardeep2006
Based on this post https://spring.io/blog/2024/10/01/from-spring-framework-6-2-to-7-0 I got the clarity that spring boot 4.x will be released in November 2025.
Comment From: bclozel
November 2025 is the provisional date for Spring Framework 7.0. Stay tuned for the Spring Boot release dates on our milestones page.