How we approach releases at Vapor
The Vapor framework’s release process, outlined by Tim on August 14, 2025, treats each pull request (PR) as a potential release, streamlining development for its 30+ packages.
21 posts with the tag “Vapor”
The new Vapor Toolbox
The Vapor Toolbox has been rewritten using Swift 6, replacing deprecated subcommands with a focus on the new command for creating Vapor projects from templates.
Embracing the Ecosystem
The upcoming Vapor 5 release embraces the modern Swift ecosystem by integrating key packages, with JWTKit v5 leading the way by adopting Swift 6, Swift Testing, Benchmark, and Swift Crypto, eliminating BoringSSL to improve build times and leveraging Swift Concurrency.
The Future of Vapor
After over four years and nearly 400 releases, Vapor 4 is transitioning to maintenance mode, with Vapor 5 now in development to leverage Swift 6’s capabilities and modernise the framework.
On Fluent Models and Sendable warnings
Since FluentKit 1.48.0, users have encountered a warning about mutable stored properties in Sendable-conforming Model classes due to Swift’s concurrency requirements and property wrapper limitations.
JWTKit is no longer Boring!
The Swift Server Workgroup announced that Swift 5.10 will be the final release before Swift 6, prompting Vapor to plan Vapor 5, with JWTKit v5 as the first package to adopt modern Swift features like full Sendable compliance and Swift 6’s strict concurrency mode.
Vapor URI Parsing Security Vulnerability
We've just released Vapor 4.90.0 which contains a fix for a security vulnerability in Vapor's URI parsing.
Vapor HTTP Error Handling Security Vulnerability
We've just released Vapor 4.84.2 which contains a fix for a security vulnerability in Vapor's error handling.
Upcoming changes to Vapor with Sendable
The Vapor team is implementing Sendable annotations across its repositories, starting with a significant pull request, to enhance safety in Swift Concurrency, following a challenging but unsuccessful attempt to use actors for some internals.
Penny Update
The Vapor team announced a new update for Penny, their Discord bot, enhancing it to post Swift Evolution proposal updates in the #swift-evolution channel, with an option for users to follow these updates on their own servers.
PostgresNIO Security Vulnerability
We released PostgresNIO 1.14.2 last week, which contains a security fix for a vulnerability in PostgresNIO's TLS support. This has been designated as CVE-2023-31136.
Updating Vapor's Templates for Swift 5.8
The Vapor team has updated its project templates to support Swift 5.8, adopting a unified target with the @main syntax for application entry points, aligning with Swift’s modern features and enabling asynchronous setup functions.
What We're Working On: March 2023
The Vapor team has launched a monthly blog series to share updates on their work, increase transparency, and outline future plans for the framework.
New Year, New Me
The Vapor team has launched a new design for their blog, marking the initial step in updating all Vapor websites to reflect the framework’s maturity and provide a consistent, modern look.
Vapor's Next Steps with async/await
Vapor is updating its supported Swift versions to a minimum of Swift 5.6 to align with Swift 6 and prepare for Vapor 5, focusing on back-deploying async/await to older OSes, ensuring safety in a concurrent environment, and adopting Sendable for compile-time data race checks.
Dockerfile makes adding optional Swift dependencies easier
When deploying Vapor apps in Docker, omitting libcurl4 and libxml2 can reduce the image size from 233 MB to 189 MB.
Enable SQL Query Logging
Fluent drivers, such as FluentPostgreSQL, log generated SQL at the debug level by default, aligning with Swift Server Workgroup (SSWG) guidelines to keep logs non-intrusive.
Vapor URLEncodedFormDecoder Security Vulnerability
We've just released Vapor 4.61.1 which contains a fix for a security vulnerability in Vapor's URLEncodedFormDecoder.
Vapor FileMiddleware Security Vulnerability
We've just released Vapor 4.60.3 which contains a fix for a security vulnerability in Vapor's FileMiddleware.
Adding a database table index
Fluent, a Swift ORM, lacks native support for adding database table indexes during creation or migration due to complexities across supported databases, but you can achieve this using SQLKit.
The next steps for Vapor
Vapor, a popular Swift web framework, is planning its next major release, Vapor 5, which will fully embrace Swift Concurrency by eliminating EventLoopFutures and leveraging AsyncSequences, actors, and Sendable conformances for improved performance and safety.