Composer 2.9 End of Life
Support dates and upgrade guidance — rebuilt from live data.
End of Life
Composer 2.9 reached end of life on 28 May 2026. It no longer receives security fixes.
73 days without security patches
Recommended action: upgrade to Composer 2.10. Check your versioncomposer --version
Support timeline
Official dates from the Composer release process.
| Milestone | Date | Status |
|---|---|---|
| Initial release | 13 Nov 2025 | — |
| End of life | 28 May 2026 | 0.2 years ago |
| Latest release | 2.9.8 · 13 May 2026 | final |
Where to go from 2.9
Recommended target: Composer 2.10.
The newest actively supported branch is Composer 2.10 (latest release 2.10.2).
Frequently asked questions
Is Composer 2.9 still safe to use?
Composer 2.9 reached end of life on 28 May 2026, 73 days ago, and is no longer covered by standard support. Running it means no guaranteed security fixes.
Can I still download Composer 2.9?
Yes — the final release (2.9.8) generally remains available from vendor archives and OS package mirrors, but installing it means running software with known, unpatched vulnerabilities.
What should I upgrade Composer 2.9 to?
Upgrade to Composer 2.10, the newest actively supported branch.