Bitbucket Data Center 10.3 release notes
12 May 2026
The Bitbucket Data Center 10.3 release is now available for upgrade.
Highlights include:
- Merge queue improvements
- Enforce stronger passwords with the new Password Policy
- Search Indexing
- Updates to supported platforms
- Security advisories
- Change log
Merge queue improvements
For: END USERS
Merge queues, introduced in Bitbucket Data Center 10.2, now come with two improvements that reduce manual steps and keep your workflows running smoothly.
Merge queue webhooks
You can now subscribe to dedicated webhook events for merge queues. These new events let you build integrations and automations that react to key moments in the merge queue lifecycle, such as when a merge result is being prepared or when a queue branch is cleaned up.
To see the full list of new merge queue webhook events and their payloads, see Event payload.
Improved cascading merges with merge queues
When cascading merge creates a downstream merge pull request that targets a branch protected by a merge queue, Bitbucket now automatically adds that cascade PR to the queue.
Previously, this would stop the cascade and raise a special pull request that someone had to manually add to the queue before the chain could continue. From 10.3, Bitbucket handles this step for you, so your cascades keep flowing without interruption.
Enforce stronger passwords with the new Password Policy
For: ADMINS
Bitbucket Data Center introduces password complexity enforcement for users managed in the internal (embedded Crowd) directory, giving enterprises greater control to satisfy compliance and security policies.
The new Password Policy is configured under Administration → User Directories → Password Policy and supports three modes:
- No password requirements: the default, chosen to align with other Atlassian Data Center products and to avoid forcing changes on existing installations after an upgrade.
- Basic: passwords must be at least 8 characters long.
- Custom: set your own minimum length and character-class rules (lowercase, uppercase, digits, special characters).
Once configured, the policy is enforced consistently across every flow that creates or changes a password, including:
- Admin-created users (with an explicit password)
- Admin-created users via "Email a link to the user to set their password"
- Public sign-up
- Self-service password change
- Password reset via emailed token
To set up a password policy:
- Go to Administration, then User Directories
- Select Password Policy
- Choose No password requirements, Basic, or Custom
- If you chose Custom, configure the minimum length and character-class requirements
- Select Save.
Note: The policy applies only to users in the internal (embedded Crowd) directory. Users in LDAP, Crowd-server, or external directories continue to be governed by those directories' own password policies.
Search Indexing
For: ADMINS
Search indexing is now shared between Bitbucket nodes, increasing the number of repositories that are indexed concurrently. The number of threads each node makes available for indexing can be increased with system properties.
Updates to supported platforms
In Bitbucket 10.3, we're introducing the following updates to supported platforms:
We’re adding support for the following platforms:
PostgreSQL 18
Learn more from the end of support announcements
Security advisories
At Atlassian, we prioritize the security of our products and have implemented a vulnerability management program to identify and resolve any security issues as quickly and comprehensively as possible. To stay informed about the latest security vulnerabilities and their corresponding fixes, visit Security Advisories.
Change log
Resolved issues in Bitbucket Data Center 10.3.0
Released 12 May 2026