OpenSSL 3.4 and the Minimus hardened-image registry both reach their end today

A quiet night on the monitored sources — nothing new or changed from the registry, and nothing in discovery that belongs on a deprecation calendar. The news is two dates already on the board arriving. OpenSSL 3.4 reaches end of support today: no further fixes of any kind, including security fixes, so move to 3.5 LTS or 4.0 (OpenSSL 3.6 follows on November 1). And Minimus turns off its hardened-image registry at reg.mini.dev — images you have already pulled keep working but stop receiving patched rebuilds. Next up: OpenAI retires GPT-4, GPT-3.5, o1 and o3 tomorrow.

A quiet night — nothing new or changed from the monitored sources, and the discovery scan surfaced nothing that fits a shutdown-and-deprecation calendar. Tonight’s news is two dates already on the board arriving.

Reached today

OpenSSL 3.4 reaches end of support. Per the OpenSSL project’s own release strategy, the 3.4 line is supported only until today — after which it receives no further fixes of any kind, including security fixes for any vulnerability found from here on. OpenSSL is almost never a dependency you name directly; it arrives through your base container image, your language runtime, or whatever TLS stack you link, which is exactly why an unsupported version is easy to keep shipping without noticing. The supported targets are OpenSSL 3.5 (LTS, until April 8, 2030) and OpenSSL 4.0 (until May 14, 2027). The same entry’s other near-term line, OpenSSL 3.6, reaches end of support on November 1 — so the entry stays on the board until then.
Minimus shuts down its hardened-image registry. Minimus — a provider of hardened, minimal, near-zero-CVE container images, in the same category as Chainguard Images and Docker Hardened Images — turns off its registry at reg.mini.dev today, ending the 60-day maintenance period that began August 24. Images you have already pulled keep working, but no new or patched rebuilds are published, so anything pinned to reg.mini.dev stops receiving the security updates that were the whole point of a hardened image. Treat it as a base-image migration with a security deadline: the nearest replacements are Chainguard Images, Docker Hardened Images, and Google distroless, or you can build your own from Wolfi/apko. Confirmed against the official wind-down notice on minimus.io.

The next three weeks, every date verified against its primary source

23 Oct — OpenAI removes GPT-4, GPT-3.5, o1 and o3 models
27 Oct — Kubernetes 1.34 end of life
30 Oct — Fitbit’s legacy Web API shutdown
31 Oct — Consul 1.22 end of life and OpenAI’s hosted Evals platform going read-only
1 Nov — Alpine 3.21 end of life, OpenSSL 3.6 end of life, and Azure Databricks Runtime 10.4 LTS
2 Nov — GitHub Actions macOS 14 runner retirement and Mullvad’s encrypted DNS shutdown
10 Nov — .NET 8 and 9 end of support, Windows 11 23H2 end of servicing and Azure Functions PowerShell 7.4
12 Nov — PostgreSQL 14 end of life

The two imminent Azure dates on the board (Databricks Runtime 10.4 LTS on November 1, PowerShell 7.4 on November 10) remain confirmed against Microsoft’s release-communications API; their notices live on JavaScript-rendered pages our fetcher can’t read directly.

Full board with live countdowns on the calendar.