27 Mar 2025 |
Infinidoge 🏳️⚧️ | Too much downstream uses JDK 8 as much as I would love to pass it along to the reaper | 01:31:14 |
Infinidoge 🏳️⚧️ | Minecraft being the one I know best off of the top of my head | 01:31:28 |
emily | when I consolidated the JDK packages I think every single one of them was multiple updates and multiple advisories behind... the latest advisory was over two months ago and the only JDK that has been updated for it is one that just went EOL | 01:31:35 |
emily | Minecraft hasn't been on JDK 8 for a long time | 01:32:15 |
Infinidoge 🏳️⚧️ | Old versions of Minecraft are though, and they are still regularly played | 01:33:08 |
Infinidoge 🏳️⚧️ | Prism has a jdk8 dependency for this reason | 01:33:15 |
msgilligan | My thumbs-up here is just for Minecraft being cool and Infinidoge 🏳️⚧️ and I discussing Minecraft at Planex Nix. I don't personally know to what extent the Minecraft community is till using JDK 8. | 01:33:55 |
Infinidoge 🏳️⚧️ | JDK 8 still gets updates, and Oracle is hellbent on keeping it alive, as much as I hate it | 01:34:36 |
msgilligan | * My thumbs-up here is just for Minecraft being cool and Infinidoge 🏳️⚧️ and I discussing Minecraft at Planex Nix. I don't personally know to what extent the Minecraft community is still using JDK 8. | 01:35:23 |
emily | only for another year or two iirc | 01:36:02 |
Infinidoge 🏳️⚧️ | The day java.com serves something other than Java 8, I'm going to go out and get celebratory ice cream | 01:36:41 |
emily | really though if it was the difference between being >two months late on JDK CVEs or not then old versions of Minecraft definitely wouldn't be enough reason to keep JDK 8 around (but I don't think it actually is that simple, of course) | 01:37:08 |
msgilligan | I can't make in promises for 25.05, other than trying to help with jextract and to lurk and learn and hope to be able to help out with JDKs on 25.11. | 01:37:20 |
Infinidoge 🏳️⚧️ | I think the biggest thing we need is an update script | 01:37:46 |
Infinidoge 🏳️⚧️ | If we can get r-ryan making PRs for JDK bumps, we could easily review them and get them merged quickly without much effort | 01:38:16 |
msgilligan | * I can't make any promises for 25.05, other than trying to help with jextract and to lurk and learn and hope to be able to help out with JDKs on 25.11. | 01:38:24 |
emily | it already does make them | 01:38:38 |
Infinidoge 🏳️⚧️ | Is anyone on the Java team a committer? If not, we may want to nominate someone for committer status | 01:38:39 |
Infinidoge 🏳️⚧️ | In reply to @emilazy:matrix.org it already does make them Really? I don't think I've gotten pinged for them. Or I've somehow missed every one | 01:38:58 |
emily | it has them open right now | 01:39:04 |
emily | I redid the update script when I consolidated them | 01:39:21 |
emily | JFX should work too although that setup is more complicated so more likely to be broken | 01:39:44 |
emily | I believe @tomodachi94:matrix.org is a committer | 01:40:03 |
Infinidoge 🏳️⚧️ | Wild.
I'll go make sure they're reviewed when I get on my laptop so we can get them merged | 01:40:27 |
emily | still I do believe that keeping around more JDKs is just going to result in carrying tons of unmarked EOL ones like before | 01:40:38 |
emily | at least with LTS they only go EOL very rarely :) | 01:40:55 |
Infinidoge 🏳️⚧️ | I think we mainly need a defined policy somewhere, and make a regular culling every new LTS release | 01:41:26 |
emily | I think it would be best to focus on making sure that we reliably don't cut stable releases with vulnerable LTS updates before worrying about setting policies for expanding the set | 01:50:20 |
msgilligan | That would be the "policy" then:
We try the best we can to keep all non-EOL LTS JDKs up-to-date.
| 01:53:53 |
msgilligan | ... or something like that. | 01:54:42 |