We always use the most up-to-date version of OAuth available.

For authorizing Salesforce orgs we use OAuth2 (the latest version available as of writing this article).

When integrating with third party services, we may be limited by what versions of OAuth that third party service supports. For example, the latest version of Bitbucket Data Center supports OAuth2 but we currently utilize OAuth1.