Nobody says there are no security updates nor any 'lack of security updates'. Quote me where I said any of that.
Easy:
I fully knew that I paid for Xenforo as a sort of as-is product with no promises of new features. BUT, what I do expect is any security updates as bare minimum for a year long. Especially during these times its much easier to find flaws with AI. I have absolutely no clue if there is still activity around security flaw reports or the detection of it. This concern is proven by the 'complains' within this thread.
All I want to say is we are left in the dark
Depends from what you consider "dark". The official state of things is atm:
• They target to release 2.4 within 2026, so while this is not a promise (and has taken long and the timeframe has been shifted in the past) they are currently well within the communicated time frame.
• We do know for the most part what will be contained in 2.4 based on the various HYS threads from the past
• We do know that with 2.4 there will come a new editor and a more or less massive overhaul of the legacy code base (which probably is one of the reasons if not the main reason for the delays)
• We do know that 3.0 will (obviously) come at some point after 2.4 and that 2.4 is the release where the focus lies currently
• We do know that 3.0 will bring a new style and that this will be the main feature. We do not yet know what this means in detail (which seems fair as the focus is on 2.4 currently).
• We do know that 2.4 will not include any of the social-media-feed alike thingies that some people loudly demand in countless variations (that partly outrage each other anyway)
• We do know (or rather can safely assume) that whatever the new style of 3.0 will bring will not be a Reddit/Facebook/Tiktok/Instagram clone, so those who demand those things won't be happy anyway and won't stop moaning
• We do know that XF reacts to known and new security issues fast (as they did this in the past and also recently)
• We do know that the company is financially sound due to the success of the cloud offerings
• We do know that there are no plans to ditch self hosting
• We do know that XF traditionally has a pretty solid architecture and code base and that the team holds to that for the future as well - so we can have trust that this will persist.
• We do know that XF has always declared itself to be a traditional forum software and within that to deliver a solid core and basis, that can easily be extended and customized through add ons rather than XF trying to become everybody's darling and to integrate each and every functionality into the core
• We do know that they want to extend that even more in direction of becoming a framework to build upon, possibly to make it easier to use XF as a foundation for things left and right of plain classical forums
• We do know that they have started use AI support in a responsible way to help with coding
• We do know that they are in the process of overhauling and improving the existing documentation
etc.
I would not call this exactly "being left in the dark".
What we don't know:
• When exactly 2.4. and later 3.0 will be released (no wonder, as it can be assumed that the XF crew does not know this either)
• What exactly any given dev of the XF crew does at any given moment in time (which is not our business anyway)
• What exactly the XF crew is currently working on on a feature level (would not change anything if we knew it)
• How much money XF as a company currently makes per year (again: not our business)
• How exactly the new style of 3.0 will look (the interest in that is understandable but on the other hand it is simply not relevant as long as 2.4 has not been released and 3.0 is not in close sight)
• How many people really code at XF and if this is full time / the main job or rather a side business (would really be nice to know and help to adjust expectations, but in the end it is the outcome that counts, so more transparency would be beneficial but absolutely it is again not our business)
While a bit more transparency and regular reporting about the current state of things would no doubt be nice and somewhat helpful to create a loose planning horizon for the own forums it seems somewhat understandable given the hysterical debates here on the forums that they rather prefer to communicate things when they are done and ready instead of communicating assumptions and probabilities that will then be taken as promises by some and lead to new aggressions and hysterical debates.
While I agree that - especially with the history of 2.4 and depending from that 3.0 - there is reason to question the speed of development and to ask for the reasons for that as well as for improvement in communication and reliability of it it is also clear that 2.2 and 2.3 do work w/o issues and there is no urgent need for a massive update from a technical perspective. And also that forums that do not do brilliant today in terms of users and engagement won't have a sudden change and become vastly successful because of 2.4. and later 3.0 once they will be released as the reasons for unsuccessful forums are clearly not within the delay of those releases but in those forums themselves. But as some are not willing to take the responsibility for the success of their own forums and rather direct that to XF again the moaning won't stop.
Have you seen the bug reports section? It seems to be just Chris dealing with all the pages of bug reports for Xenforo and the 3 official add-ons.
You should better have a closer look. Also, as recently a couple of bugs have been closed it could possibly be that we may be approaching another release as this happens typically not too long before one.
As a 'costumer' who potentionally don't know anything about developing/coding
... you have a pretty strong opinion about developing/coding.
