Database

CockroachDB: supported versions and end-of-life dates today

CockroachDB 26.3, 26.2, 25.4, 25.2, 24.3 and 1 older line are supported (26.3 until Feb 19, 2027); 26.1 reached end of life on Aug 2, 2026; the latest release is 26.3.0.

Last checked against endoflife.date and deps.dev.

Latest release
26.3.0
GitHub stars
32.6k
OpenSSF Scorecard
5.1 / 10

Supported versions

CockroachDB release lines and security support dates from endoflife.date
VersionSecurity supportLatestReleased
CockroachDB 26.3Ending soon: Until 26.3.0
CockroachDB 26.2LTSSupported: Until 26.2.8
CockroachDB 25.4LTSSupported: Until 25.4.17
CockroachDB 25.2LTSSupported: Until 25.2.24
CockroachDB 24.3LTSSupported: Until 24.3.36
CockroachDB 24.1LTSEnding soon: Until 24.1.33
CockroachDB 26.1Ended: Ended 26.1.8
CockroachDB 25.3Ended: Ended 25.3.7
CockroachDB 25.1Ended: Ended 25.1.10

Licence

  • CockroachDB is not open source (CockroachDB Software License)

    Since 24.3 (Nov 2024) every release ships under Cockroach Labs’ proprietary licence; the free Enterprise tier is limited to companies under $10M annual revenue and requires telemetry. Earlier releases were BSL.

    Licence source

Maintenance and supply chain

OpenSSF Scorecard 5.1 / 10 (scored )

The Scorecard rates the repository’s security practices, not known vulnerabilities. Recent activity: 30 commits and 19 issue updates found in the last 90 days.

Weakest checks

  • Dangerous CI workflow patterns (Dangerous-Workflow 0/10)
  • Over-privileged CI tokens (Token-Permissions 0/10)
  • No security policy (Security-Policy 0/10)

Full ScorecardSource repository

Production checklist

PostgreSQL production checklist: 5 checks before launch

  • Must do: Automated backups with point-in-time recovery, and a tested restore
  • Should do: Put a connection pooler in front (e.g. PgBouncer)
  • Should do: Require TLS for client connections
See all 5 checks with how to verify each

Alternatives

  • PostgreSQL

    Advanced open-source relational database with rich features

    Strengths

    • ACID compliant with strong data integrity
    • Advanced features (JSON, full-text search, GIS)

    Trade-offs

    • Steeper learning curve than MySQL
    • Slightly slower for simple read-heavy workloads
    PostgreSQL health today
  • MySQL

    Popular open-source relational database optimized for web applications

    Strengths

    • Widely adopted with extensive documentation
    • Fast for read-heavy workloads

    Trade-offs

    • Less advanced features than PostgreSQL
    • Some storage engines lack full ACID compliance
    MySQL health today
  • MariaDB

    MySQL fork with enhanced features and better performance

    Strengths

    • Drop-in replacement for MySQL
    • Better performance optimizations

    Trade-offs

    • Some compatibility issues with MySQL plugins
    • Smaller community than MySQL/PostgreSQL
    MariaDB health today
  • Amazon Aurora

    AWS-managed MySQL/PostgreSQL-compatible database

    Strengths

    • MySQL/PostgreSQL compatibility
    • 5x faster than standard MySQL

    Trade-offs

    • AWS vendor lock-in
    • Limited to AWS regions
    Amazon Aurora health today

Check CockroachDB in your own stack

This page checks CockroachDB in general. Your repo pins specific versions: the free dependency check reads your manifests and lists what to fix first. Prism Agent runs the same live checks on your whole stack and turns them into a plan your coding agent can build.