Problem Definition

Spring Boot 2.7 and Spring Framework 5.3 are both end of life.

• Spring Boot 2.7 EOL: 24 Nov 2023
• Spring Framework 5.3 EOL: 31 Aug 2024

Suggested Solution

Request to upgrade Spring Boot used by Bitbucket Data Center to a supported version to ensure continued support, security, and performance improvements.

Spring Boot 3 requires Spring Framework 6. Therefore, the Spring Framework also has to be upgraded. Bitbucket DC 7.14 and later versions are on Spring Framework 5.3

Why This Is Important

Using unsupported versions poses security risks, as they no longer receive updates or patches for vulnerabilities.

Workaround

There are no workarounds available since Spring Boot 3 is backwards incompatible with Bitbucket DC. However, if a critical security vulnerability does arise we are committed to resolving it, and for Bitbucket 8.x and 9.x releases this may involve fixing the vulnerability via a change in Bitbucket or by forking Spring Boot/Spring Framework and backporting a change