- The maintenance window for specific Astro Runtime versions.
- The frequency of updates.
Release channels
To meet the unique needs of different operating environments, Astro Runtime versions are associated with the following release channels:- Stable: Includes the latest Astronomer and Apache Airflow features, available on release
- Long-term Support (LTS): Includes additional testing, stability, and maintenance for a core set of features
Astro Runtime maintenance policy
The maintenance period for an Astro Runtime version depends on its release channel:
For each maintained major Runtime version, bug fixes are delivered only through new
minor.patch versions. If you report an issue with a maintained Astro Runtime image that is not on the latest minor.patch version, Astronomer Support might ask that you upgrade your Astro Runtime version to see if that resolves the issue.
For example, if you report an issue occurring on a Deployment running Astro Runtime 12.0.0, Astronomer support might ask you to first upgrade to the latest 12.minor.patch version before troubleshooting your issue any further. If the issue still persists after upgrading, any fixes to that issue will be delivered in a new minor or patch release. Astronomer strives to provide backwards compatibility for all upgrades within the version. For example, you can upgrade directly from 11.0.0 to 11.16.0 and expect no breaking changes unless otherwise stated in documentation.
Within the maintenance window of each Astro Runtime version, the following is true:
- A set of Docker images corresponding to that version is available for download on Quay.io.
- Astronomer will regularly publish bug or security fixes identified as high-priority.
- Support for paying customers running a maintained version of Astro Runtime is provided by Astronomer Support.
- A user can create a new Deployment with the Astro UI, API, or Astro CLI with any maintained
major.minorversion pair of Runtime. For new Deployments, the Astro UI assumes the latest patch.
- New Deployments cannot be created on Astro with an unmaintained version of Runtime. Versions that are no longer maintained will not render as an option in the Deployment creation process from the Astro UI, API, or Astro CLI.
- The Deployment view of the Astro UI will show a warning that encourages the user to upgrade if the Deployment is running an unmaintained version.
- The latest version of the Astro CLI will show a warning if a user pushes an Astro Runtime image to Astronomer that corresponds to an unmaintained version.
Basic Support
Astronomer Support will continue to accept support tickets for an additional period after a Runtime version becomes unmaintained. The ability of Astronomer Support to do deep dives on unmaintained versions of Astro Runtime is very limited, so you may be asked to upgrade to a maintained version if a solution cannot be straightforwardly found on your current version. Astronomer is not obligated to answer questions regarding a Deployment that is running a version that is past its Basic Support window. Astronomer Support strongly recommends remaining on maintained versions of Astro Runtime and limiting the use of Basic Support, as Astronomer will not release any patches for Basic Support versions whatsoever, even in the case of a critical security vulnerability.End of maintenance date
Maintenance is discontinued the last day of the month for a given version. For example, if the maintenance window for a version of Astro Runtime is January - June of a given year, that version will be maintained by Astronomer until the last day of June.Restricted runtime versions
There are some restricted versions of the Astro runtime that have known bugs and can’t be used even if you enabled deprecated Astro Runtime versions.Yanked versions
You can find a comprehensive list of available, deprecated, and restricted versions of the Astro Runtime versions at
updates.astronomer.io. Restricted versions of the Astro Runtime have the status "yanked":true and include an explanation of why the version is unavailable.
Security
Astronomer continuously checks for available security fixes for software used in Astro Runtime. This process includes scanning language dependencies, container images, and open source threat intelligence sources. When a security fix is available, Astronomer evaluates potential risks for organizations using Astro Runtime and determines deployment priority. Low-priority fixes are deployed following the regular maintenance policy as described in Astro Runtime maintenance policy. If a vulnerability is not yet addressed in a third-party dependency and no official fix is available, Astronomer attempts to address the vulnerability or its impact with environmental mitigations. Whenever possible, Astronomer collaborates with the upstream project to support a timely delivery of the official fix. This process also covers images publicly available on Quay.io and provides context for their vulnerability scanning results. Astro Runtime releases may or may not include a fix to a Common Vulnerability and Exposure (CVE). When you use a particular Astro Runtime version the day of release, the CVE fixes that version contains might be undisclosed. For security purposes, a description of these fixes will be retroactively added to release notes only once the CVE resolution is published or announced by the upstream project. If you identify a vulnerability that results in relevant risk for your organization, contact Astronomer security.Backport policy for bug and security fixes
- Functional bugs: When Astronomer identifies a significant functional bug in Astro Runtime, a fix is backported to all Long Term Support (LTS) versions and the latest stable version. To avoid the impact of previously identified bugs, Astronomer recommends that you consistently upgrade Astro Runtime to the latest stable version.
- Security vulnerabilities: When Astronomer identifies a significant security vulnerability in Astro Runtime, a fix is backported and made available as a patch version for all stable and LTS versions in maintenance. A significant security issue is defined as an issue with significant impact and exploitability.
Astro Runtime lifecycle schedule
The following table contains the exact lifecycle for each published version of Astro Runtime.
If you have any questions or concerns, contact Astronomer support.