Debian 11 "bullseye" has reached end-of-life — LTS ended 31 August 2026, so debian:11 and debian:bullseye base images are now unpatched

A quiet night for new vendor announcements. Tonight adds one detectable archive entry: Debian 11 "bullseye" reached end-of-life on 31 August 2026 when its two-year LTS term ended, so anything still built on the debian:11 / debian:bullseye base image now runs without security updates — upgrade to Debian 12 "bookworm". On the board: the GitHub Copilot MAI-Code-1-Flash deprecation lands 10 September, and the Relay app and Microsoft Sentinel SAP connector retirements 14 September.

No new upcoming sunsets crossed the monitored sources or discovery searches tonight, and no corrections are outstanding. The one item worth adding is a recently-passed end-of-life that a lot of infrastructure is quietly running past. Tonight’s three re-verification flags were again the Microsoft pages that render their dates in JavaScript (Sentinel SAP connector, Azure Automation Python/PowerShell runtimes, Exchange Web Services); each was re-confirmed correct by hand against Microsoft’s release-communications API and page metadata — not data errors.

New (archive): Debian 11 “bullseye” end-of-life — 31 August 2026

Debian 11 “bullseye” reached end-of-life on 31 August 2026. Its regular security support ended back on 14 August 2024; the community LTS team then carried it for two more years, and the Debian release page states that term ran “until August 31st, 2026.” After that date there are no further security updates from either team.

The reason this belongs on the calendar even though the date has passed is where bullseye lives. debian:bullseye is one of the most widely used container base images on Docker Hub, and a pinned FROM debian:11 in a Dockerfile does not announce itself — CI keeps building green, images keep shipping, and the OS underneath simply stops receiving patches. The fix is a standard dist-upgrade to Debian 12 “bookworm” (supported through June 2028) or Debian 13 “trixie”, plus repinning any base images off debian:11 / debian:bullseye. Where a longer runway is genuinely needed, Freexian’s commercial Extended LTS covers bullseye beyond the free window.

This entry is detectable: the lastcall CLI fingerprints the debian:11 and debian:bullseye image tags — the images going away — while deliberately leaving the debian:12 / debian:bookworm replacements alone. Point it at a repo and it flags a Dockerfile still on bullseye before the next CVE does.

On the board

10 September: the GitHub Copilot MAI-Code-1-Flash deprecation.
14 September: the Relay app and Microsoft Sentinel SAP connector agent retirements.
17 September: the Azure Maps Render v1 API retirement.

Further out: OpenAI’s Sora 2 video API shutdown (24 September), a cluster on 30 September, Exchange Web Services in Exchange Online (1 October), the GitHub Copilot model deprecations (2 October), OpenAI’s 23 October API removals, then .NET 8 and 9 end of support (10 November) and PostgreSQL 14 end-of-life (12 November). The full board with live countdowns is on the calendar.