CriticalPHP2Shell: is your PHP patched?

Deprecations across your stack

Browse confirmed deprecation notices from SaaS, APIs, and developer tools. Use the digest to keep your watched services out of migration surprises.

Looking for a deprecated package?

A package deprecation and a vendor API deprecation are different signals. Check your manifest for deprecated dependencies, then follow vendor notices for API, SDK, and SaaS migrations that package managers cannot see.

Read the package guide

Deprecated package FAQ

What does it mean when a package is deprecated?

A deprecated package is still installable in many registries, but its maintainer has warned that it should no longer be used. Review the deprecation message, replacement package, and your dependency tree before migrating.

How is a package deprecation different from an API deprecation?

A package deprecation concerns a library in a package registry. An API or SaaS deprecation is a vendor retiring an endpoint, feature, SDK behavior, or product capability, often outside your manifest.

Clear filters

Breaking changes include removal of several globals and modules from sandboxed preload scripts, updated ASAR file descriptor handling, stricter worker Node.js integration, dropping 32‑bit builds, and deprecation of synchronous safeStorag...

Appsmith AI datasource support removed; existing AI queries are disabled and must be migrated to other providers.

Removed the deprecated `extra` keyword from Path, Query, Header, Cookie, Body, Form, and File classes

Introduced many new configurable limits and default changes (e.g., maxPendingDataLength, maxConcurrentMessages, ValidationPipe target default, field nesting limits, reconnectOnConnackError enabled).

Deprecate the `root_path` parameter in FastAPI()

Added new `--timings` flag, experimental `redirectPage`, parallel prerendering, and `notFound()` handler to improve build diagnostics, redirects, performance, and 404 handling.

Migrates the build system to Bazel bzlmod (removing WORKSPACE) and bumps the hermetic LLVM/Clang toolchain to version 22, breaking existing build configurations and wasm runtime flags.

Added new client factory API, BiDi code generator, and published @seleniumhq/atoms npm package with webextension support.

Appsmith AI is EOL; new AI datasource connections are disabled and existing queries stop working, requiring migration to other providers (breaking/deprecation).

Custom user profile photos with new avatars.write scope and Webflow added as an OAuth2 provider.

Added WebMCP API access, custom video frame rates, CSS‑styled action decorations, VP9 encoding and deprecated the fontSize option.

LTS 8.9.0 adds security hotfixes (Omnichannel endpoints, 2FA retry) and backports critical fixes for the 12‑month support window.