Time to Contain

Splunk SOAR on-premises 8.7.0 drops Python 3.9

Dated . Source: Splunk SOAR 8.7.0 release notes, read

09-02month and day

What happened

Splunk SOAR on-premises 8.7.0 reached general availability on 2026-09-02, and its release notes say it drops support for Python 3.9 (release notes read 2026-11-03). Splunk's docs for the cloud product say it runs Python 3.9, with 3.13 support in preparation (docs read 2026-11-04).

Splunk SOAR playbooks are generated as Python, and custom functions are written in Python. A playbook or function that depends on the dropped version needs work before an on-premises upgrade.

What it changes for a buyer

If you run Splunk SOAR on premises, test containment playbooks and custom functions against the supported Python version before you upgrade, and keep a rollback plan for the platform. The note does not change Splunk's scores.

All notes are on the updates page. The scores on this site change only when a vendor-controlled page changes; see the corrections log.