Planning note for Dataverse installations using S3
James Myers
FYI: The library Dataverse has been using to connect to S3 stores (AWS SDK v1.x) will reach it’s “end of support” at the end of 2025.
Dataverse 6.7 upgrades to the version of library that has ongoing support (AWS SDK v2.x). We recommend that sites using S3 stores (whether using AWS S3 storage or not) plan to upgrade to v6.7 before then.
(There is no specific security issue at this point. However, if one arises, there would be no announcement and no fix from Amazon. This is similar to when Payara announced they would stop supporting the Payara 5.x community versions and we recommended moving to Dataverse 6.x which uses the Payara 6.x community version, which continues to get regular updates).
Finally – standard security reminders: As noted in the Dataverse Guides, we generally recommend staying current with Dataverse releases and encourage installations to add contact emails to the installation spreadsheet (which is accessible via the guides link earlier in this sentence) to receive security notices. Any security concerns can be reported to secu...@dataverse.org .
James D. Myers