The GeoServer team is making great progress on our 2025 roadmap plans, with CITE Certification Achieved, and GeoServer 3 underway, the project is going well.

Thanks to 2025 Sponsors:

Security

We have added a “disclosure” field to our issue tracker to better schedule communication around security vulnerability resolution. To allow everyone time to upgrade, disclosure is scheduled some time after an issue is both fixed and available in stable and maintenance release streams. Managing this communication has proven difficult during the release process.

Thanks to Jody, Andrea and Peter for working with the issue tracker, security procedure, and updating the script used to generate release blog posts.

We continue to be in need of resources, both developer resources and funding, to address the expectations placed on open source projects. If you are in a position to support this activity, please contact us at geoserver-security@lists.osgeo.org .

GeoServer 3

The big news is the completion of Milestone 1 : Preparation with the release of GeoServer 2.28.0, allowing the Milestone 2 : Migration activities to proceed as scheduled.

For more information on GeoServer 3 development, review the project plan and GeoServer 3 Crowdfunding FAQ.

GeoServer 3 Milestone 1 Completed

The release of GeoServer 2.28.0 represents the end of Milestone 1: Preparation:

  • Upgrade from Java Advanced Imaging 1.1.3 to Eclipse ImageN 0.9.0.

  • Java 17 LTS minimum, ending support for Java 11.

  • Lots of build improvements, with the highlight being a bill-of-materials “geotools” pom.xml file to manage versions across GeoTools, GeoWebCache, and GeoServer.

  • A new community module, gs-sec-oidc-plugin, replacing gs-oauth2 plugins.

GeoServer 3 Milestone 2 Underway

GeoServer 3 Milestone 2: Migration is underway:

  • Friday 17 October: Code Freeze

    We will be freezing the main branches of the related projects on Friday 17 Oct 2025, in preparation for the Milestone 2 code sprint. Please follow the announcement on Discourse.

  • Monday 20 October: Code Sprint

    With the branches frozen, the GeoServer 3 team is assembling for an intensive code sprint to start the migration to Spring Framework 3.

GeoServer 3 Milestones

Crowdfunding

Thanks to sponsors for supporting GeoServer 3 crowdfunding, we hope you are pleased with the progress thus far and look forward to sharing GeoServer 3 with you in the months ahead.

GeoServer 3 is supported by the following organisation:

Individual donations: Abhijit Gujar, Hennessy Becerra, Ivana Ivanova, John Bryant, Jason Horning, Peter Smythe, Sajjadul Islam, Sebastiano Meier, Stefan Overkamp.