Changes for page Why You Should Upgrade XWiki Regularly for Security and Stability
Last modified by Agnease on 2026/05/26 10:58
Summary
-
Page properties (2 modified, 0 added, 0 removed)
-
Objects (0 modified, 1 added, 0 removed)
Details
- Page properties
-
- Title
-
... ... @@ -1,0 +1,1 @@ 1 +Why You Should Upgrade XWiki Regularly for Security and Stability - Content
-
... ... @@ -5,7 +5,7 @@ 5 5 <section class="resource-header" aria-labelledby="hero-title"> 6 6 <div class="container"> 7 7 <div class="text-center"> 8 - <div class=" resource-kicker">8 + <div class="hero-kicker"> 9 9 <i class="fa fa-refresh" aria-hidden="true"></i> 10 10 XWiki upgrade guidance 11 11 </div> ... ... @@ -24,6 +24,18 @@ 24 24 <div class="container"> 25 25 <div class="resource-layout"> 26 26 27 + <aside class="resource-sidebar" aria-label="Page summary"> 28 + <h4>In this guide</h4> 29 + <ul> 30 + <li><a href="#why-it-matters">Why upgrades matter</a></li> 31 + <li><a href="#upgrade-checklist">Upgrade checklist</a></li> 32 + <li><a href="#safe-process">Safe process</a></li> 33 + <li><a href="#common-mistakes">Common mistakes</a></li> 34 + <li><a href="#upgrade-rhythm">Upgrade rhythm</a></li> 35 + <li><a href="#upgrade-faq">FAQ</a></li> 36 + </ul> 37 + </aside> 38 + 27 27 <article class="resource-content"> 28 28 29 29 <p> ... ... @@ -40,6 +40,22 @@ 40 40 41 41 <div class="resource-note"> 42 42 <p> 55 + <strong>In practice:</strong> an XWiki upgrade should review the current version, target version, 56 + required intermediate steps, installed extensions, custom code, authentication setup, infrastructure, 57 + backups, rollback expectations and the business-critical features that must be validated before 58 + production is touched. 59 + </p> 60 + </div> 61 + 62 + <p> 63 + An XWiki upgrade is the process of moving an existing instance to a newer XWiki version while preserving 64 + content, configuration, extensions, customizations, access rights and business-critical behavior. A safe 65 + upgrade is not only a software installation task. It is a controlled maintenance process with preparation, 66 + staging validation, production rollout and follow-up notes. 67 + </p> 68 + 69 + <div class="resource-note"> 70 + <p> 43 43 <strong>The main point:</strong> regular upgrades are not only about new features. They reduce security 44 44 exposure, compatibility risk and long-term maintenance cost. 45 45 </p> ... ... @@ -59,6 +59,11 @@ 59 59 public or private. But staying close to supported versions makes security maintenance more manageable. 60 60 </p> 61 61 90 + <p> 91 + For a broader view of security-related checks, see 92 + <a href="$xwiki.getURL('resources.xwiki-security-review')">what an XWiki security review should actually include</a>. 93 + </p> 94 + 62 62 <h3>2. Large upgrade gaps are harder to control</h3> 63 63 <p> 64 64 A small, regular upgrade is usually easier to validate than a large jump after several years. Large gaps ... ... @@ -73,6 +73,11 @@ 73 73 planning an upgrade. 74 74 </p> 75 75 109 + <p> 110 + For more details on organizing custom work, see 111 + <a href="$xwiki.getURL('resources.xwiki-custom-development')">how to keep XWiki custom development maintainable across upgrades</a>. 112 + </p> 113 + 76 76 <h3>4. Infrastructure requirements evolve</h3> 77 77 <p> 78 78 XWiki upgrades can involve more than the application itself. Java, Tomcat, the database, Docker images, ... ... @@ -86,8 +86,13 @@ 86 86 should be part of the validation plan. 87 87 </p> 88 88 89 - <h2 id="upgrade-checklist"> Practical checklistbefore planningan upgrade</h2>127 + <h2 id="upgrade-checklist">XWiki upgrade planning checklist</h2> 90 90 129 + <p> 130 + A practical XWiki upgrade plan should cover both the application and the environment around it. 131 + The following checklist can be used as a starting point before upgrading a production instance. 132 + </p> 133 + 91 91 <ul class="resource-checklist"> 92 92 <li>Identify the current XWiki version and the target version.</li> 93 93 <li>Check whether intermediate upgrade steps are needed.</li> ... ... @@ -139,6 +139,51 @@ 139 139 review, staging validation, production rollout, documentation and follow-up. 140 140 </p> 141 141 185 + <h2 id="upgrade-faq">XWiki upgrade FAQ</h2> 186 + 187 + <h3>Why should XWiki be upgraded regularly?</h3> 188 + <p> 189 + XWiki should be upgraded regularly to reduce security exposure, keep extensions compatible, avoid large 190 + upgrade gaps and make long-term maintenance easier. Regular upgrades are easier to plan and validate than 191 + major jumps after several years. 192 + </p> 193 + 194 + <h3>Is a working XWiki instance safe to leave unchanged?</h3> 195 + <p> 196 + Not necessarily. An XWiki instance can continue to work from a user perspective while becoming outdated, 197 + harder to upgrade and exposed to avoidable risks. Visible functionality is not the same as long-term 198 + maintainability. 199 + </p> 200 + 201 + <h3>What should be checked before upgrading XWiki?</h3> 202 + <p> 203 + Before upgrading XWiki, review the current version, target version, intermediate upgrade steps, installed 204 + extensions, custom code, authentication setup, infrastructure, backups, rollback expectations and 205 + business-critical features. 206 + </p> 207 + 208 + <h3>Should an XWiki upgrade be tested outside production?</h3> 209 + <p> 210 + Yes. The safest approach is to rehearse the upgrade on a staging environment or temporary clone, fix 211 + compatibility issues there, then perform the production upgrade with a clear plan and rollback expectations. 212 + </p> 213 + 214 + <h3>What makes an XWiki upgrade difficult?</h3> 215 + <p> 216 + XWiki upgrades become more difficult when the version gap is large, extensions are outdated, custom code is 217 + undocumented, authentication is complex, infrastructure dependencies changed or critical workflows were not 218 + included in the validation plan. 219 + </p> 220 + 221 + <div class="resource-note"> 222 + <p> 223 + Related resources: 224 + <a href="$xwiki.getURL('resources.xwiki-security-review')">what an XWiki security review should actually include</a> 225 + and 226 + <a href="$xwiki.getURL('resources.xwiki-custom-development')">how to keep XWiki custom development maintainable across upgrades</a>. 227 + </p> 228 + </div> 229 + 142 142 <div class="resource-cta"> 143 143 <h3>Need help planning an XWiki upgrade?</h3> 144 144 <p> ... ... @@ -145,24 +145,62 @@ 145 145 If your XWiki instance is outdated, customized or business-critical, the safest next step is to review 146 146 the current version, extensions, infrastructure and validation needs before planning the production upgrade. 147 147 </p> 148 - <a class="btn btn-primary" href="$xwiki.getURL(' services.xwiki-upgrades')">ViewXWikiupgradeservices</a>236 + <a class="btn btn-primary" href="$xwiki.getURL('contact.WebHome')">Request an upgrade review</a> 149 149 </div> 150 150 151 151 </article> 152 - 153 - <aside class="resource-sidebar" aria-label="Page summary"> 154 - <h4>In this guide</h4> 155 - <ul> 156 - <li><a href="#why-it-matters">Why upgrades matter</a></li> 157 - <li><a href="#upgrade-checklist">Upgrade checklist</a></li> 158 - <li><a href="#safe-process">Safe process</a></li> 159 - <li><a href="#common-mistakes">Common mistakes</a></li> 160 - <li><a href="#upgrade-rhythm">Upgrade rhythm</a></li> 161 - </ul> 162 - </aside> 163 - 164 164 </div> 165 165 </div> 166 166 </section> 243 + 244 + <script type="application/ld+json"> 245 + { 246 + "@context": "https://schema.org", 247 + "@type": "FAQPage", 248 + "mainEntity": [ 249 + { 250 + "@type": "Question", 251 + "name": "Why should XWiki be upgraded regularly?", 252 + "acceptedAnswer": { 253 + "@type": "Answer", 254 + "text": "XWiki should be upgraded regularly to reduce security exposure, keep extensions compatible, avoid large upgrade gaps and make long-term maintenance easier. Regular upgrades are easier to plan and validate than major jumps after several years." 255 + } 256 + }, 257 + { 258 + "@type": "Question", 259 + "name": "Is a working XWiki instance safe to leave unchanged?", 260 + "acceptedAnswer": { 261 + "@type": "Answer", 262 + "text": "Not necessarily. An XWiki instance can continue to work from a user perspective while becoming outdated, harder to upgrade and exposed to avoidable risks. Visible functionality is not the same as long-term maintainability." 263 + } 264 + }, 265 + { 266 + "@type": "Question", 267 + "name": "What should be checked before upgrading XWiki?", 268 + "acceptedAnswer": { 269 + "@type": "Answer", 270 + "text": "Before upgrading XWiki, review the current version, target version, intermediate upgrade steps, installed extensions, custom code, authentication setup, infrastructure, backups, rollback expectations and business-critical features." 271 + } 272 + }, 273 + { 274 + "@type": "Question", 275 + "name": "Should an XWiki upgrade be tested outside production?", 276 + "acceptedAnswer": { 277 + "@type": "Answer", 278 + "text": "Yes. The safest approach is to rehearse the upgrade on a staging environment or temporary clone, fix compatibility issues there, then perform the production upgrade with a clear plan and rollback expectations." 279 + } 280 + }, 281 + { 282 + "@type": "Question", 283 + "name": "What makes an XWiki upgrade difficult?", 284 + "acceptedAnswer": { 285 + "@type": "Answer", 286 + "text": "XWiki upgrades become more difficult when the version gap is large, extensions are outdated, custom code is undocumented, authentication is complex, infrastructure dependencies changed or critical workflows were not included in the validation plan." 287 + } 288 + } 289 + ] 290 + } 291 + </script> 292 + 167 167 {{/html}} 168 168 {{/velocity}}
- Agnease.Code.SEODetailsClass[0]
-
- metaDescription
-
... ... @@ -1,0 +1,1 @@ 1 +Learn why regular XWiki upgrades matter for security, stability, extension compatibility and long-term maintenance, especially for production XWiki instances. - metaTitle
-
... ... @@ -1,0 +1,1 @@ 1 +Why You Should Upgrade XWiki Regularly for Security and Stability | Agnease