TYPO3 v10 End of Free Support Announcement

We published the first sprint release of the TYPO3 v10 release series in July 2019. Three consecutive releases followed, between October 2019 and February 2020, leading to the long-term support release TYPO3 version 10.4 (also known as TYPO3 v10 LTS), on 21 April 2020. Today, approximately three years after its release, we announce the upcoming end of free support for this version in accordance with the TYPO3 lifecycle and deprecation policy.

Strategic initiatives have made a significant contribution to the success story of the v10 release series. Initiatives are independent and community-driven. They are a place where new concepts are evaluated, discussed, and developed outside of the fixed roadmap for the TYPO3 Core. Several great initiatives made it into the core of TYPO3, resulting in some of the features outlined below.

The following sections summarize the key highlights of TYPO3 v10 LTS and how they shaped the future of the content management system.

The system extension Dashboard provides backend users with a quick overview of the current system status. Backend users can customize their dashboard by adding and removing widgets. Dashboards feature great flexibility and let developers create their own widgets in addition to a selection of widgets that ship with TYPO3 v10 LTS.

Native site handling and the Site Management backend module were introduced in TYPO3 v9 LTS. As a consistent and standardized way to configure sites in TYPO3 in a central place, the module has become a mandatory step in the setup process since TYPO3 version 10.0. Integrators can now create a clean, initial TYPO3 instance from scratch in seconds.

A heavily enhanced multi-step wizard helps users create new forms in the TYPO3 backend. Integrators can influence the form creation process by overriding options set in the general configuration file.

Human-readable URLs were introduced as a core feature in TYPO3 v9 LTS. Since version 10.1, TYPO3 automatically updates the URLs of all sub-pages when users manually change page slugs. The system also creates redirects from the old to the new URL to avoid “page not found” errors. Read the TYPO3 documentation for further details.

Configuration mistakes can happen when editors create redirects using the “Redirects” backend module. We introduced a CLI command in TYPO3 v10 LTS that checks the integrity of redirects and detects clashes, for example, if a redirect has the same name as an existing page URL.

TYPO3’s Link Validator aims to detect broken links throughout the system. This vital function has been extended further in TYPO3 v10 LTS and now supports inaccessible pages, missing files, and even invalid external links.

System emails that TYPO3 generates now use the Fluid templating engine to send template-based HTML emails. This feature enables agencies to customize the design of these emails or even replace them completely. Read more about this feature in the TYPO3 documentation.

TYPO3 v10 LTS is one of the first major content management systems to offer lazy-loading of images out-of-the-box. This technique reduces the amount of data transferred between the client and the server, making for a faster site and better user experience.

Although TYPO3’s caching framework uses the database as the storage for most caches by default, TYPO3 v10 LTS lets integrators and system administrators configure alternative storage types for caches.

Since v10 LTS, TYPO3’s default action when backend users upload files is configurable. The option "skip this file" is the safest, but TYPO3 allows integrators to re-configure it as required.

The updated backend module provides a new detail view, making managing backend users much more straightforward.

The modern SaaS solution Crowdin was introduced in TYPO3 v10 LTS to take translations of backend labels to the next level. In addition to translating the TYPO3 backend, integrators and developers can also use Crowdin to translate user interface text in custom-developed TYPO3 extensions. The TYPO3 documentation provides further details on this topic.

The migration of the frontend login functionality to Extbase and Fluid in TYPO3 v10 LTS offers developers and integrators some excellent benefits. The visual appearance of the form and the system-generated emails can be customized or overridden by modifying the Fluid templates. Validators allow developers to implement strict password validation rules to ensure a password meets certain security requirements.

Among other measures, we added the following security features to TYPO3 v10 LTS.

Password Reset/Recovery

A highly customizable password reset and recovery functionality was added to TYPO3 v10 LTS. To ensure a high standard, we have built a number of security features into this function.

SameSite Cookies

All cookies sent by TYPO3 support the SameSite-flag, improving the user’s privacy and hardening security.

Widget ViewHelper Cookies

Since TYPO3 version 10.2, integrators can disable the function to set a cookie for the widget ViewHelpers. This improves the user’s privacy and helps system operators comply with the European’s General Data Protection Regulation (EU GDPR).

Attributes through TypoLink

Another feature that strengthens the privacy of users relates to external links that are processed by TYPO3’s TypoLink function. These links now show the HTML tag attribute rel="noopener noreferrer" by default.

TYPO3 uses some carefully selected libraries from the Symfony project. These components are modern, stable, and kept up-to-date by an active open-source community under the free MIT license. We introduced the following Symfony components in TYPO3 v10 LTS to enhance the TYPO3 Core and to make the work of our community of amazing developers easier.

Symfony’s DependencyInjection

TYPO3 now supports dependency injection (DI) based on the PSR-11 standard and incorporates Symfony’s industry-proven DI concepts.

Symfony’s EventDispatcher

With PSR-14, a new standard has been accepted and published in 2019. We implemented an interchangeable EventDispatcher that follows the PSR-14 standard and is compatible with Symfony’s component with the same name.

Symfony’s Mailer API

The TYPO3 Core uses Symfony’s “Mime” and the “Mailer” packages. The Mime package is used for composing emails, and the “Mailer” package is used for processing and sending them. Read more about TYPO3's Mailer API in the TYPO3 documentation.

Apart from Symfony v5.0 components, TYPO3 v10 LTS also brought us several other libraries and packages from the open-source universe. At the same time, TYPO3 version 10.2 was the first TYPO3 release that supported PHP version 7.4.

We also took the opportunity to remove a few system extensions from the TYPO3 Core. The following extensions have become obsolete over time and are now available at the TYPO3 Extension Repository (TER): RSA Authentication (Extension key: rsaauth), Task Center (Extension key: taskcenter), Actions (Extension key: sys_action), and Frontend Editing (Extension key: fe_edit).

Please note that the TYPO3 community will not provide further security updates for the TYPO3 v10 release series. If you operate TYPO3 instances using this version, we highly recommend an upgrade to the latest stable TYPO3 release. This is currently TYPO3 v11 LTS which receives security patches and bug fixes until the end of November 2024. The release of TYPO3 v12 LTS is scheduled for April 2023 and will be supported for three years until April 2026.

Although we discontinued the free maintenance of TYPO3 v10 LTS, you can buy extended long-term support (ELTS) from the TYPO3 GmbH. ELTS offers three more years of security, compliance, and compatibility. Consider this offer if you need more time for an upgrade to TYPO3 v11 or v12 and have to stay legally compliant and up-to-date. Through ELTS, you achieve a total of 6 years of support per major version.

A big thank you goes to everyone who made TYPO3 v10 LTS possible. Apart from the highly motivated developers who contributed code, fixed bugs, and implemented new features, experts from many different knowledge areas were also involved in this release: testing, design, documentation, infrastructure, marketing, project management, etc.

The Dashboard and the Crowdin Integration are just two examples of successful initiatives that made it into the TYPO3 Core. What a fantastic achievement!

Thanks again for being a part of the TYPO3 universe and contributing to TYPO3 and the open-source community.