Vaadin 8 Extended Maintenance Releases

Extended Maintenance releases are available as an optional add-on for Prime and Enterprise subscribers.

After 5 years from its initial release, Vaadin 8 reached the end of free support on February 21, 2022. Vaadin Prime and Enterprise subscribers may access extended maintenance releases to keep their V8 applications running.

Scope of included products

  • The Vaadin 8 Core framework.
  • All Vaadin 8-specific Pro add-ons.
  • All official Core Add-ons (for example CDI, Spring, ContextMenu, etc.).

Common use-cases

  • You wish to keep your Vaadin 8 app running while performing an upgrade to the latest Vaadin version.
  • You have a customer-facing web application built on Vaadin 8 with a binding support agreement with your customers. 
  • Your internal web framework powering your critical business web applications is built on Vaadin 8.

Types of maintenance tasks

The Vaadin support team performs two types of maintenance tasks:

1. Proactive tasks

    • Automated integration testing on Vaadin 8-supported browsers.
    • 3rd-party library monitoring for security alerts etc.
    • Security impact monitoring of any new features added to Vaadin 8 (through EoD etc.). The security impact is reviewed through the normal review processes.

2. Reactive maintenance tasks

    • Responding to bug fix and warranty priorities for Vaadin 8.
    • Responding to Expert Chat requests for Vaadin 8-related issues.

Communication about security vulnerabilities

    • If Vaadin receives a report for a security flaw, Vaadin will fix the issue, and then communicate the incident to all affected customers through a private mailing list.
    • Expert Chat may be used for Vaadin 8-related communication.

Bug Fixes and feature releases in the Framework since version 8.14.3

Version 8.14.3 was the last free version released under Apache 2 license. Under the extended maintenance service, Vaadin has already released the following versions to our customers under commercial CVDLv4 terms:

Vaadin 8.19.0

  • Changed license from Commercial Vaadin Developer License 4.0 to Vaadin Commercial License version 1. This change does not affect active subscribers, but it does mean that future releases of Vaadin Framework may move from dev- and build-time license checking to runtime license checking. Version 8.19.0 does not do that yet. See LICENSE file in the downloadable package or the Vaadin Commercial License and service terms document for more information.
  • Fixed issue #12562. The internal state of ComboBox got confused when adding new items after calling clear().
  • Improved the vaadin-server-mpr-jakarta and vaadin-compatibility-server-mpr-jakarta POM dependency definitions such that these packages do not pull in vaadin-server and vaadin-compatibility-server as unwanted dependencies, respectively.
  • Fixed a number of assertion functions which would fail when MPR was in use. Improves testability of the framework and should allow running with assertions enabled in MPR configurations.
  • Removed logging of Atmosphere version while MPR is in use. This fixes runtime failures under some configurations.
  • Updated Atmosphere to version 2.4.30-vaadin5 in order to make Vaadin Framework 8 compatible with Jetty 10.
  • Updated Vaadin License Checker to version 1.11.2 to support new license model.

Vaadin 8.18.0

  • Fixed issue #12560 by improving Grid's horizontal scrolling scrolling logic.
  • Fixed an issue in Combobox where scrolling to selection would fail if the user had typed into the input field. Possibly related to #12562.
  • Added runAfterRoundTrip API to the UI class for improved sequence control, allowing execution of a callback after one or more client-server round trips have been completed.
  • Separated portlet support code out of vaadin-server into its own package, vaadin-portlet. This will break your build if your application makes use of Portlet classes and you do not import the vaadin-portlet dependency.
  • Added support for Vaadin Multiplatform Runtime version 24+ by adding packages vaadin-server-mpr-jakarta and vaadin-compatibility-server-mpr-jakarta. This is only needed for MPR 24+, and is NOT guaranteed to work as generic Jakarta support (even though it does so at the moment) as we may add MPR specific functionality or even hard MPR dependencies in the future.

Vaadin 8.17.0

  • Improved hierarchical data container handling, resulting in increased speed and correcting some potential memory leaks.
  • Fixed an issue in Grid's MultiSelect mode introduced by performance improvements made to Vaadin 8.16.0 which would erroneously cause a refreshed data item to become selected.
  • Fixed an issue introduced in Vaadin 8.15.1's Grid focus stealing fix where the focus stealing prevention would become overly zealous.
  • Updated JSoup version from 1.14.3 to 1.15.3. This is a BREAKING CHANGE for many projects, as it requires you to find all references to and replace them with references to The API of the two classes is the same; Safelist is a drop-in replacement for Whitelist. This change was made to all Vaadin versions simultaneously to address CVE-2022-36033 and keep the dependencies in line for use with Vaadin MPR.
  • Updated PuppyCrawl dependency from version 8.18 to 8.29 in order to avoid false positive alert in dependency check
  • Updated CheckStyle dependency from version 2.17 to 3.2.0 in order to avoid false positive alert in dependency check

Vaadin 8.16.1

  • Fixed a failure-to-start condition on some server configurations (e.g. Tomcat) caused by the connector map cleanup logic change in 8.16.0
  • Updated Jetty version from 9.4.43.v20210629 to 9.4.48.v20220622 to fix a potential security issue
  • Updated License Checker version to support Vaadin 8 together with the latest Vaadin Flow in MPR configurations
  • Updated the license information provided by vaadin-root POM to correctly show CVDL-4 as the project license instead of Apache-2.0

Vaadin 8.16.0

  • Introduced predefined text/html Snippets feature for the RichTextArea component
  • Moved connector map cleaning logic invocation from UI.unlock() to VaadinService.requestEnd() when not using Push
  • Improved Grid multi-select performance
  • Backported automatic conversion support and other Binder improvements from Vaadin Flow

Vaadin 8.15.2

  • Added support for Liferay kernel versions up to 49
  • Changed all resources to use Object.class as interface type to support OSGi Portlets on Liferay CE 7.3.6 GA7 or later (issue #12504)

Vaadin 8.15.1

  • Fixed an issue where Grid was moving the focus away from external input controls when the data source contents were updated
  • Fixed an issue where manual field binding configurations might get overwritten by automatic binding logic
  • Field level verification in Binder is no longer run twice

Vaadin 8.15.0

  • Fix: Allow scrolling away from a Grid using touch
  • Fix: Throw exception when attempting to merge BeanPropertySets with identical keys but different value types
  • Added a more intuitive resynchronization error message
  • Change license from Apache 2.0 to CVDLv4


Bug Fixes and feature releases in the Pro products

Charts 4.3.1

  • Fix: Do not sanitize plain strings and do not strip table tags. See issue #633.

How to access the releases

Maven access

Starting with 8.15.0, the extended maintenance releases are deployed to Maven Central. You will need a license to use the extended support releases - the license file and the instructions on how to use it can be found here:

List of supported technologies

Vaadin 8 is compatible with Java 8 and newer up to Java 8. The framework building is not possible with newer Java versions than 8, however, it is possible to develop applications with Java 11 and Java 17 provided that client-side code conforms to Java 8. Note, that using newer JDK versions will pose limitations to application server compatibility. Vaadin 8 is especially supported on the following operating systems:

    • Windows
    • Linux
    • Mac OS X

Vaadin Framework 8 requires Java Servlet API 3.0 but also supports later versions and should work with any Java application server that conforms to the standard. The following application servers are supported:

    • Apache Tomcat 7-9
    • Apache TomEE 1.7 and 7.0
    • Oracle WebLogic Server 12.2
    • IBM WebSphere Application Server 9
    • JBoss EAP 6
    • Wildfly 8-13
    • Jetty 8-9
    • Glassfish 2-4

Vaadin 8 supports the JSR-286 Portlet specification and all portals that implement the specification should work. The following portals are supported:

    • Liferay Portal 6.2
    • Liferay Portal 7.0

Vaadin Framework 8 supports the following desktop browsers. Our automated tests cover the latest versions of Firefox and Chrome:

    • Mozilla Firefox 54+
    • Mozilla Firefox ESR 52+
    • Internet Explorer 11: latest
    • EdgeHTML: latest
    • Chromium Edge: latest
    • Safari on Mac: 9+, latest
    • Google Chrome: 59+, latest

Additionally, Vaadin supports the built-in browsers in the following mobile operating systems:

    • iOS 9+
    • Android 4+ with Chrome 42+

Need extended maintenance for your V8 application?

Extended maintenance is available as an add-on for Prime and Enterprise subscribers. Contact us, and we can build the support package you need.