# magento.watch

> Independent, free, open lifecycle tracker for Magento Open Source, Adobe Commerce and Mage-OS. This file summarises current Magento versions, release dates, end-of-life dates and system requirements; the API and MCP server return the same data. Not affiliated with Adobe Inc.

## Current state (2026-10-31)

- Magento Open Source: latest 2.4.9 (released 2026-05-12, EOL 2029-05-31); 3 releases currently in support.
- Adobe Commerce: latest 2.4.9 (released 2026-05-12, EOL 2029-05-31); 3 releases currently in support.
- Mage-OS: latest 3.5.0 (released 2026-09-08, EOL unknown); 10 releases currently in support.

## Primary pages

- [Home](https://magento.watch/): current Magento versions, EOL dates, system requirements quick answer.
- [All versions](https://magento.watch/versions): full lifecycle list across distributions.
- [Supported versions](https://magento.watch/versions/supported): releases still inside their support window.
- [EOL versions](https://magento.watch/versions/eol): releases past end-of-life.
- [Magento Open Source](https://magento.watch/versions/magento-community): distribution index.
- [Adobe Commerce](https://magento.watch/versions/magento-commerce): distribution index.
- [Mage-OS](https://magento.watch/versions/mage-os): distribution index.
- [API reference](https://magento.watch/api): free JSON REST, no auth.
- [MCP server](https://magento.watch/mcp): Model Context Protocol endpoint.
- [Security bulletins](https://magento.watch/security): Adobe/Magento CVEs with fixed-in versions per distribution.
- [Quality patches](https://magento.watch/patches): Adobe QPT patches with resolved compatible versions and modified files.
- [Methodology](https://magento.watch/methodology): sources, update cadence, status definitions and coverage limits.
- [Upstream fixes](https://magento.watch/patches?source=upstream): community fixes merged upstream into magento/magento2 after a release line was cut, with the released versions each applies to cleanly. One page per fix at https://magento.watch/upstream-fixes/{id}.
- [Patches by module](https://magento.watch/patches/module): index of modules with their quality patches and upstream fixes. Per-version hubs at https://magento.watch/patches/for/{distribution}/{version}.

## JSON data

- All versions: https://magento.watch/api/v1/{distribution}/versions
- Supported only: https://magento.watch/api/v1/{distribution}/versions/supported
- Receiving security patches: https://magento.watch/api/v1/{distribution}/versions/secure
- Latest: https://magento.watch/api/v1/{distribution}/versions/latest
- Single release: https://magento.watch/api/v1/{distribution}/versions/{version}
- All security bulletins: https://magento.watch/api/v1/security-bulletins
- Single security bulletin: https://magento.watch/api/v1/security-bulletins/{id}
- Version security status: https://magento.watch/api/v1/{distribution}/versions/{version}/security
- Quality patches for a version: https://magento.watch/api/v1/{distribution}/versions/{version}/patches
- Quality patch search: https://magento.watch/api/v1/patches/search?distribution=&version=&query=
- Single quality patch: https://magento.watch/api/v1/patches/{id}
- All upstream fixes: https://magento.watch/api/v1/upstream-fixes
- Upstream fixes for a version: https://magento.watch/api/v1/{distribution}/versions/{version}/upstream-fixes
- Upstream fix search: https://magento.watch/api/v1/upstream-fixes/search?distribution=&version=&query=
- Single upstream fix: https://magento.watch/api/v1/upstream-fixes/{id}
- Distributions: `magento-community`, `magento-commerce`, `mage-os`.

## MCP tools

- `get_version`, `get_all_versions`, `get_supported_versions`, `get_eol_versions`, `check_compatibility`, `get_latest_version`
- `get_security_bulletins`, `get_security_bulletin`, `check_version_security`
- `find_patch`, `get_patch`
- `find_upstream_fix`, `get_upstream_fix`

## Status vocabulary

- `supported`: The newest released patch of a release line that has not reached its end-of-support date. Being inside the support window is not enough: only the newest patch counts.
- `outdated`: A release of a line still in support for which a newer patch of the same line exists; the fixes it lacks ship in that newer patch.
- `vulnerable`: A tracked Adobe security bulletin affects this release and the release does not include the fix; the remedy is a later release or an Adobe isolated patch.
- `end of support`: The release is past its published end-of-support date and no longer receives security fixes. Shown as eol in the API and MCP server.
- `pre-release`: An alpha, beta or release-candidate build published ahead of general availability. It is not supported for production, has no end-of-support date, and its system requirements are a preview that can change before the GA release.

Supported, outdated and end of support describe the lifecycle axis; vulnerable, secure and unknown describe the security axis, so one release can be supported and vulnerable at once.

- `secure`: No tracked security bulletin affects this release without a fix in it.
- `unknown`: The tracked bulletins do not cover this distribution, so no security claim is made.

The API `statusLabel` field uses `pre-release` (alpha, beta or RC build, not for production), `upcoming`, `supported (latest)`, `supported` (the release may be outdated), `eol` (end of support) and `unknown`.

## License & attribution

API and content free to reuse. Cite as `magento.watch`. Independent project, not affiliated with Adobe Inc.