From stable to unshakeable: announcing upcoming major releases for Atlassian Data Center

[#1]

Hi Data Center Community,

We’re excited to announce the next major versions of Atlassian Data Center products. We’re making further investments to help ensure your self-managed environments stay secure, reliable, and easy to operate. Building on the work we did for previous major upgrades, these upcoming changes will sit underneath:

• Jira Software 12
• Jira Service Management 12
• Confluence 11
• Bitbucket 11
• Bamboo 13
• Crowd 8

This work is now in the scoping and planning phase. We’ll share more details and timelines as soon as they’re available, and individual product teams will communicate specific changes, release plans, and upgrade guidance.

Scope at a glance

Stronger security by design

The upcoming changes share a united goal: meet and maintain a strong security posture. To achieve this, we are:

• Tightening how Java Naming and Directory Interface (JNDI) is used and configured to close off types of historical vulnerabilities.
• Strengthening protections against Server‑Side Request Forgery (SSRF) across the stack.
• Upgrading and hardening core HTTP client libraries.
• Moving to Jackson v3 for JSON processing.

Infrastructure updates

We’re making significant updates to our core technology stack, including:

• Upgrading to Spring 7 and Jakarta 11
• Adding support for Java 25 and removing support for Java 21
• Upgrading to React 19
• Upgrading to jQuery 4

How these changes help you

• Modernize core components by updating the underlying libraries and frameworks to supported versions that follow today’s security best practices.
• Make it faster to ship security fixes quickly and consistently across products that share the same foundations.
• Reduce reliance on legacy or hard‑to‑upgrade pieces of the stack, which often show up in customer security scans and audits.
• Provide a stronger secure‑by‑default baseline when you upgrade to the next major versions.
• Reduce surprises where older, forked, or out‑of‑support libraries become a long‑term risk.
• Clarify communication about which APIs and components are supported, so you can make informed decisions about customisations and apps.

Impact for admins and partners

Because all Data Center Products are seeing major upgrades, some breaking changes, especially for apps and custom integrations, are expected:

• Admins:
  • You’ll adopt these shared changes by upgrading to product versions built on them.
  • We’ll provide detailed upgrade and compatibility notes so you can test in non‑production first.
• Marketplace partners and custom app developers:
  • Some APIs and dependencies will change, and certain deprecated or unsafe patterns might be removed.
  • We’ll share early access builds and migration guidance so you can validate and adapt your apps before GA.

We’ll keep you informed about these changes so you can plan your testing and rollout with confidence.

Next Steps

The next major versions are currently in the scoping and planning phase. We’ll provide:

• Early access and evaluation builds of the next Data Center product versions ahead of general availability.
• Documentation and checklists to help you validate security, reliability, and app compatibility in your environment.
• Follow‑up Community posts and changelogs to outline specific product versions, timelines, and breaking changes as they’re finalized. Visit Atlassian developer changelog

The major upgrades require careful planning and collaboration. We’re committed to keeping you informed throughout the process and ensuring your self-managed environment stays secure, reliable, and supported.

What you can do now

• Stay informed and watch for upcoming early access releases and detailed migration guides.
• Get involved, test the new builds in your staging environments, and share your feedback with us.
• Prepare your teams and review your current integrations and customizations to anticipate any required updates.

Let us know what you think

Your input is invaluable as we finalize all the changes and shape the future of Atlassian Data Center. Please share your questions, concerns, or suggestions in the comments below or reach out through your usual support channels.

Thank you for being part of our community and for your ongoing partnership as we continue to raise the bar for security and reliability together.

[Trudy Claspill]

Will you ensure that a compatible version of JCMA is released at the same time?

Jira v11 was released without ensuring the latest JCMA version was compatible, and I think we are still waiting on a compatible JCMA version to be released.

https://jira.atlassian.com/browse/JRASERVER-79194

[Normann P_ Nielsen _Netic_]

Great - unfortunately the App Vendors seems slow (problay cloud orientated) to actually get compable, I am waiting for Apps for bothe Jira 11.3 and Confluence 10.x

So Adaptavist and the rest, please get the job done :-)

[Anna Scisłowska]

hi @Trudy Claspill
Thank you for your comment. We are committed to ensuring that for Jira 12, a compatible version of JCMA is available alongside the release.

[Adrien Ragot _Requirement Yogi_]

If there are changes for developers, can you please ensure you cross-post those announcements on community.developer.atlassian.com ?

Otherwise the plugin vendors will be the last to know about those changes.