| 18 Aug 2025 |
 Tomodachi94 (they/them) | But first, we definitely should get rid of Gradle 7 before we start cleaning up 8 usages | 00:58:42 |
 msgilligan | Yeah, getting rid of Gradle 7 is higher priority. Your tracking issue for that is very well-done and very useful! | 00:59:40 |
| msgilligan | Did you see my comment about openjfx 's dependency on gradle_7? | 01:01:22 |
| Tomodachi94 (they/them) | Just now 🙃 That definitely looks to be the case | 01:02:31 |
| Tomodachi94 (they/them) | To start I think I'll mark 7 as insecure and backport that to 25.05 so that there's no expectation of that being secure. (Think I did that with Gradle 6 about half a year ago?) | 01:04:06 |
| Tomodachi94 (they/them) | * To start I think I'll mark 7 as insecure and backport that to 25.05 so that there's no expectation of that being secure on stable. (Think I did that with Gradle 6 about half a year ago?) | 01:04:17 |
| msgilligan | That sounds like a good start. Please ask me to review that PR because I'm curious to see how that is done. | 01:04:52 |
| Tomodachi94 (they/them) | An aside: I think you'd make a wonderful addition to the Java team if you're interested in joining. You seem very invested in the Java ecosystem in Nixpkgs, and you're very keen on helping out | 01:06:49 |
 emily | only old ones IIRC | 01:07:47 |
| emily | openjfx23 should be fine | 01:07:50 |
| msgilligan | Yes, and we should have openjfx25 (LTS) before 25.11. | 01:08:20 |
| emily | oh 23 is EOL | 01:08:23 |
| emily | so that's fun | 01:08:28 |
| Tomodachi94 (they/them) | Fun times | 01:09:15 |
| emily | Java ecosystem loves having 5 versions of things that are all super incompatible … and then also not supporting them | 01:09:20 |
| Tomodachi94 (they/them) | Why do we have so many OpenJFXes around again? | 01:09:51 |
| emily | people love using them :P | 01:12:00 |
| emily | https://gluonhq.com/products/javafx/ | 01:12:13 |
| emily | I believe this is authoritative for the support | 01:12:21 |
| msgilligan | Yeah, Java users in the real world want those old versions to be supported. And they pay companies like Gluon to provide it. | 01:12:44 |
| emily | so 23 is EOL. 24 doesn't require Gradle 7 and is not EOL, but will be soon, but we'll have 25 then | 01:12:51 |
| emily | so I guess… if we could drop the ones before 24 then that would be convenient. but it's also possible just bumping Gradle will work | 01:13:27 |
| emily | since I was just copying what the old packages did IIRC | 01:13:33 |
| emily | yeah, but no guarantee the fixes are public AIUI :( | 01:14:01 |
| emily | and JavaFX contains an entire WebKit | 01:14:11 |
| msgilligan | Yes, there's that too. | 01:14:13 |
| msgilligan | Yep, and WebKit oh my! | 01:14:27 |
| emily | (and from what I saw they don't seem to be fantastic at backporting upstream security fixes) | 01:14:32 |
| msgilligan | FX WebKit is separate (Java) module. I wonder if we have any packages that use it? | 01:16:17 |
| msgilligan | But since we seem to have consensus on merging the Gradle 9 PR as is, can we get some reviews? | 01:18:47 |
