| 1 Nov 2024 |
emily | and JDK 8 is dying in, oh, only two short years anyway | 18:23:33 |
emily | (personally I would be happy to see it gone from Nixpkgs sooner than that, some distros have already dropped it and there's "only" like 50 packages that depend on it) | 18:24:23 |
emily | (some of which can probably be bumped) | 18:24:27 |
Tomodachi94 (they/them) | I feel old now, I remember when you could only play Minecraft with JDK 8 😂
| 18:24:26 |
emily | buddy, I remember when you couldn't play Minecraft with JDK 8 | 18:24:57 |
emily | 🧓 | 18:25:02 |
emily | I think Infinidoge linked some project that ports old Minecraft versions to newer JDKs, because of course that's a thing | 18:25:27 |
Infinidoge 🏳️⚧️ | lwjgl3ify Currently only for 1.7.10 (because the GregTech New Horizons team is cracked) but it'll likely get ported | 18:28:50 |
Infinidoge 🏳️⚧️ | It's a mod that replaces the old game engine with a newer one, and I think stops Forge from yelling | 18:29:15 |
emily | it would be nice enough just to get rid of the stuff in the tree that uses JDK 8 so that we can drop the source package, while still keeping the Temurin binary build until it dies (since it's low-maintenance and doesn't add cruft) | 18:31:14 |
emily | I first played Minecraft on the Halloween Update and I felt like I was late to the party because there was never a time when I played it without the Nether. | 18:32:18 |
emily | time flies. | 18:32:22 |
emily | actually no I played classic for like 5 minutes once before that. | 18:32:32 |
emily | the real old heads are the ones who played with the neon green leaves | 18:33:22 |
Tomodachi94 (they/them) | Looks like the only in-tree consumer of OracleJDK is javacard-devkit | 20:51:29 |
emily | which is some other proprietary Oracle stuff that hasn't been updated since it was added in 2019 | 21:02:04 |
emily | "Oracle has already released 3.0.5, but versions after 2.2.2 appear to be Windows-only." and was, um, a major version behind at that point? | 21:02:20 |
emily | I think we can kill it, but I'd assume it would work with OpenJDK too since I'm pretty sure our Oracle JDK is just an OpenJDK build without anything too fancy? | 21:02:49 |
Tomodachi94 (they/them) | I'll go ahead and PR a fix that makes it use the jre attribute, then another that drops the OracleJDKs | 23:53:54 |
Tomodachi94 (they/them) | I'll also try to find out whether java-devkit is even maintained, and drop it after the feature freeze | 23:54:45 |
Tomodachi94 (they/them) | * I'll also try to find out whether javacard-devkit is even maintained, and drop it after the feature freeze | 23:54:53 |
emily | fwiw the author has not contributed to NixOS all year | 23:54:54 |
emily | In reply to @emilazy:matrix.org "Oracle has already released 3.0.5, but versions after 2.2.2 appear to be Windows-only." and was, um, a major version behind at that point? it's sort of definitionally unmaintained though given ^ | 23:55:06 |
Tomodachi94 (they/them) | Oh missed that, my bad | 23:55:23 |
emily | I just checked: looks like it's from 2006? | 23:56:04 |
emily | In reply to @tomodachi94:matrix.org I'll go ahead and PR a fix that makes it use the jre attribute, then another that drops the OracleJDKs would you mind knownVulnerabilitiesing the Oracle JDKs on 24.05 too? no need to go CVE-hunting, can just say e.g. "Not updated for 4 years, many disclosed vulnerabilities" | 23:57:15 |
| 2 Nov 2024 |
Tomodachi94 (they/them) | In reply to@emilazy:matrix.org would you mind knownVulnerabilitiesing the Oracle JDKs on 24.05 too? no need to go CVE-hunting, can just say e.g. "Not updated for 4 years, many disclosed vulnerabilities" Sure :) I'll do that first, then drop on master once it's merged | 00:13:28 |
| Toma joined the room. | 00:34:39 |
Tomodachi94 (they/them) | Hmm, does anyone have a good link for the oraclejdk knownVulns entry? | 00:41:02 |
emily | https://openjdk.org/groups/vulnerability/advisories/ | 00:44:04 |