This is an automated email from the ASF dual-hosted git repository.
skygo pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/netbeans-website.git
The following commit(s) were added to refs/heads/master by this push:
new f258372cc more blog entry for 2021
new 1d183cd6e Merge pull request #666 from ebarboni/moreblogentry
f258372cc is described below
commit f258372cc78550c5a60837273dccabd51305309d
Author: Eric Barboni <[email protected]>
AuthorDate: Tue Jul 25 15:52:23 2023 +0200
more blog entry for 2021
---
...sed.adoc => announce-apache-netbeans-12-3.adoc} | 27 ++++-------
...sed.adoc => announce-apache-netbeans-12-4.adoc} | 23 +++++----
...sed.adoc => announce-apache-netbeans-12-5.adoc} | 22 ++++-----
...sed.adoc => announce-apache-netbeans-12-6.adoc} | 18 +++----
.../announce-apache-netbeans-13-released.adoc | 4 +-
.../announce-apache-netbeans-14-released.adoc | 4 +-
.../announce-apache-netbeans-15-released.adoc | 4 +-
.../announce-apache-netbeans-16-released.adoc | 4 +-
.../announce-apache-netbeans-17-released.adoc | 4 +-
.../announce-apache-netbeans-18-released.adoc | 4 +-
.../blogs/better-news-correct-deprecation-of.adoc | 56 ++++++++++++++++++++++
.../blogs/jep-411-deprecate-the-security.adoc | 53 ++++++++++++++++++++
.../blogs/jep-411-deprecate-the-security1.adoc | 53 ++++++++++++++++++++
.../content/blogs/log4j-and-apache-netbeans.adoc | 4 +-
.../blogs/netbeans-pub-hangout-in-prague.adoc | 4 +-
.../content/blogs/towards-fair-trade-for-foss.adoc | 4 +-
16 files changed, 220 insertions(+), 68 deletions(-)
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-3.adoc
similarity index 62%
copy from
netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
copy to netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-3.adoc
index 09a93d281..3b6e6365c 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
+++ b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-3.adoc
@@ -17,9 +17,9 @@
// under the License.
//
-= [ANNOUNCE] Apache NetBeans 13 Released
-Geertjan Wielenga
-2022-03-04
+= [ANNOUNCE] Apache NetBeans 12.3 Released
+:author: Geertjan Wielenga
+:revdate: 2021-03-11
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
@@ -30,27 +30,18 @@ Geertjan Wielenga
:syntax: true
-The Apache NetBeans team is pleased to announce that Apache NetBeans 13 is
released today on March 4, 2022. Apache NetBeans is a full IDE for Java SE,
Java EE, PHP, JavaScript, HTML5 and more, including some support for Groovy and
C/C++.
+The Apache NetBeans team is pleased to announce that Apache NetBeans 12.3 was
released on March 3rd 2021. Apache NetBeans is a full IDE for Java SE, Java EE,
PHP, JavaScript, HTML5 and more, including some support for Groovy and C/C++.
-Our schedule is publicly available here:
+Apache NetBeans 12.3 is the first quarterly feature update in 2021. The LTS
release of the current cycle is Apache NetBeans 12.0. The 12.3 release has not
been as heavily tested as the LTS release. Our schedule is publicly available
here:
https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule
-New & noteworthy features of the 13 release:
+New & noteworthy features of the 12.3 release:
-xref:../download/nb13/index.adoc[Apache NetBeans 13 Features page]
+xref:../download/nb123/index.adoc[Apache NetBeans 12.3 Features page]
Downloads:
-xref:../download/nb13/nb13.adoc[Apache NetBeans 13 Download page]
-
-Feel free to share the good news!
-
-Thanks everyone, and best wishes,
-
-Neil, Eric, and Geertjan
-
-Release Manager for Apache NetBeans 13
-
-on behalf of Apache NetBeans PMC
+xref:../download/nb123/nb123.adoc[Apache NetBeans 12.3 Download page]
+Feel free to share the good news!
\ No newline at end of file
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-4.adoc
similarity index 57%
copy from
netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
copy to netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-4.adoc
index 09a93d281..77320f623 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
+++ b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-4.adoc
@@ -17,9 +17,9 @@
// under the License.
//
-= [ANNOUNCE] Apache NetBeans 13 Released
-Geertjan Wielenga
-2022-03-04
+= [ANNOUNCE] Apache NetBeans 12.4 Released
+:author: Geertjan Wielenga
+:revdate: 2021-05-29
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
@@ -30,27 +30,26 @@ Geertjan Wielenga
:syntax: true
-The Apache NetBeans team is pleased to announce that Apache NetBeans 13 is
released today on March 4, 2022. Apache NetBeans is a full IDE for Java SE,
Java EE, PHP, JavaScript, HTML5 and more, including some support for Groovy and
C/C++.
+The Apache NetBeans team is pleased to announce that Apache NetBeans 12.4 was
released on May 19th 2021 footnote:[We're a little late in announcing this
because we were creating convenience binaries, e.g., installers, since
announcing the result of the vote thread.]. Apache NetBeans is a full IDE for
Java SE, Java EE, PHP, JavaScript, HTML5 and more, including some support for
Groovy and C/C++.
-Our schedule is publicly available here:
+Apache NetBeans 12.4 is a quarterly feature update. The LTS release of the
current cycle is Apache NetBeans 12.0. The 12.4 release has not been as heavily
tested as the LTS release. Our schedule is publicly available here:
https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule
-New & noteworthy features of the 13 release:
+New & noteworthy features of the 12.4 release:
-xref:../download/nb13/index.adoc[Apache NetBeans 13 Features page]
+xref:../download/nb124/index.adoc[Apache NetBeans 12.4 Features page]
Downloads:
-xref:../download/nb13/nb13.adoc[Apache NetBeans 13 Download page]
+xref:../download/nb124/nb124.adoc[Apache NetBeans 12.4 Download page]
Feel free to share the good news!
Thanks everyone, and best wishes,
-Neil, Eric, and Geertjan
+Geertjan and Neil
-Release Manager for Apache NetBeans 13
-
-on behalf of Apache NetBeans PMC
+Release Managers for Apache NetBeans 12.4
+on behalf of Apache NetBeans PMC
\ No newline at end of file
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-5.adoc
similarity index 59%
copy from
netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
copy to netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-5.adoc
index 09a93d281..64bbd566b 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
+++ b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-5.adoc
@@ -17,9 +17,9 @@
// under the License.
//
-= [ANNOUNCE] Apache NetBeans 13 Released
-Geertjan Wielenga
-2022-03-04
+= [ANNOUNCE] Apache NetBeans 12.5 Released
+:author: Geertjan Wielenga
+:revdate: 2021-09-21
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
@@ -30,27 +30,27 @@ Geertjan Wielenga
:syntax: true
-The Apache NetBeans team is pleased to announce that Apache NetBeans 13 is
released today on March 4, 2022. Apache NetBeans is a full IDE for Java SE,
Java EE, PHP, JavaScript, HTML5 and more, including some support for Groovy and
C/C++.
+The Apache NetBeans team is pleased to announce that Apache NetBeans 12.5 was
released on September 13th 2021 footnote:[We're again a little late in
announcing this because we were creating convenience binaries, e.g.,
installers, since announcing the result of the vote thread.]. Apache NetBeans
is a full IDE for Java SE, Java EE, PHP, JavaScript, HTML5 and more, including
some support for Groovy and C/C++.
-Our schedule is publicly available here:
+Apache NetBeans 12.5 is a quarterly feature update. The LTS release of the
current cycle is Apache NetBeans 12.0. The 12.5 release has not been as heavily
tested as the LTS release. Our schedule is publicly available here:
https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule
-New & noteworthy features of the 13 release:
+New & noteworthy features of the 12.5 release:
-xref:../download/nb13/index.adoc[Apache NetBeans 13 Features page]
+xref:../download/nb125/index.adoc[Apache NetBeans 12.5 Features page]
Downloads:
-xref:../download/nb13/nb13.adoc[Apache NetBeans 13 Download page]
+xref:../download/nb125/nb125.adoc[Apache NetBeans 12.5 Download page]
Feel free to share the good news!
+
Thanks everyone, and best wishes,
-Neil, Eric, and Geertjan
+Eric
-Release Manager for Apache NetBeans 13
+Release Manager for Apache NetBeans 12.5
on behalf of Apache NetBeans PMC
-
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-6.adoc
similarity index 72%
copy from
netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
copy to netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-6.adoc
index 09a93d281..498375e2c 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
+++ b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-12-6.adoc
@@ -17,9 +17,9 @@
// under the License.
//
-= [ANNOUNCE] Apache NetBeans 13 Released
-Geertjan Wielenga
-2022-03-04
+= [ANNOUNCE] Apache NetBeans 12.6 Released
+:author: Geertjan Wielenga
+:revdate: 2021-12-06
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
@@ -30,27 +30,27 @@ Geertjan Wielenga
:syntax: true
-The Apache NetBeans team is pleased to announce that Apache NetBeans 13 is
released today on March 4, 2022. Apache NetBeans is a full IDE for Java SE,
Java EE, PHP, JavaScript, HTML5 and more, including some support for Groovy and
C/C++.
+The Apache NetBeans team is pleased to announce that Apache NetBeans 12.6 was
released on November 29th 2021. Apache NetBeans is a full IDE for Java SE, Java
EE, PHP, JavaScript, HTML5 and more, including some support for Groovy and
C/C++.
Our schedule is publicly available here:
https://cwiki.apache.org/confluence/display/NETBEANS/Release+Schedule
-New & noteworthy features of the 13 release:
+New & noteworthy features of the 12.6 release:
-xref:../download/nb13/index.adoc[Apache NetBeans 13 Features page]
+xref:../download/nb126/index.adoc[Apache NetBeans 12.6 Features page]
Downloads:
-xref:../download/nb13/nb13.adoc[Apache NetBeans 13 Download page]
+xref:../download/nb126/nb126.adoc[Apache NetBeans 12.6 Download page]
Feel free to share the good news!
Thanks everyone, and best wishes,
-Neil, Eric, and Geertjan
+Neil and Geertjan
-Release Manager for Apache NetBeans 13
+Release Manager for Apache NetBeans 12.6
on behalf of Apache NetBeans PMC
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
index 09a93d281..5a022bf7c 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
+++
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-13-released.adoc
@@ -18,8 +18,8 @@
//
= [ANNOUNCE] Apache NetBeans 13 Released
-Geertjan Wielenga
-2022-03-04
+:author: Geertjan Wielenga
+:revdate: 2022-03-04
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-14-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-14-released.adoc
index 7ced21fc2..85b022efb 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-14-released.adoc
+++
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-14-released.adoc
@@ -18,8 +18,8 @@
//
= [ANNOUNCE] Apache NetBeans 14 Released
-Geertjan Wielenga
-2022-06-17
+:author: Geertjan Wielenga
+:revdate: 2022-06-17
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-15-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-15-released.adoc
index 85207474a..d852adb57 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-15-released.adoc
+++
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-15-released.adoc
@@ -18,8 +18,8 @@
//
= [ANNOUNCE] Apache NetBeans 15 Released
-Geertjan Wielenga
-2022-09-07
+:author: Geertjan Wielenga
+:revdate: 2022-09-07
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-16-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-16-released.adoc
index a6794d644..c2c3fef8a 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-16-released.adoc
+++
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-16-released.adoc
@@ -18,8 +18,8 @@
//
= [ANNOUNCE] Apache NetBeans 16 Released
-Geertjan Wielenga
-2022-12-15
+:author: Geertjan Wielenga
+:revdate: 2022-12-15
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-17-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-17-released.adoc
index b807d67a7..209902e61 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-17-released.adoc
+++
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-17-released.adoc
@@ -18,8 +18,8 @@
//
= [ANNOUNCE] Apache NetBeans 17 Released
-Geertjan Wielenga
-2023-02-21
+:author: Geertjan Wielenga
+:revdate: 2023-02-21
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-18-released.adoc
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-18-released.adoc
index 8504b7311..db5ad86b0 100644
---
a/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-18-released.adoc
+++
b/netbeans.apache.org/src/content/blogs/announce-apache-netbeans-18-released.adoc
@@ -18,8 +18,8 @@
//
= [ANNOUNCE] Apache NetBeans 18 Released
-Geertjan Wielenga
-2023-06-01
+:author: Geertjan Wielenga
+:revdate: 2023-06-01
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/better-news-correct-deprecation-of.adoc
b/netbeans.apache.org/src/content/blogs/better-news-correct-deprecation-of.adoc
new file mode 100644
index 000000000..d12f1c386
--- /dev/null
+++
b/netbeans.apache.org/src/content/blogs/better-news-correct-deprecation-of.adoc
@@ -0,0 +1,56 @@
+//
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements. See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership. The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License. You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied. See the License for the
+// specific language governing permissions and limitations
+// under the License.
+//
+
+= Better JEP 411 News: Correct Deprecation of SecurityManager
+:author: Geertjan Wielenga
+:revdate: 2021-05-28
+:jbake-type: post
+:jbake-tags: blogentry
+:jbake-status: published
+:keywords: Apache NetBeans blog index
+:description: Apache NetBeans blog index
+:toc: left
+:toc-title:
+:syntax: true
+
+
+See https://mail.openjdk.java.net/pipermail/jdk-dev/2021-May/005616.html
+
+....
+"We have updated the JEP with a few changes to the "Issue Warnings"
+section [1], summarized as follows:
+
+If the Java runtime is started without setting the system property
+'java.security.manager' then a custom Security Manager can be installed
+dynamically by calling System::setSecurityManager, just as in Java 16.
+No UnsupportedOperationException will be thrown. This call will,
+however, issue a warning message explaining that the Security Manager is
+deprecated and will be removed in a future release.
+
+We plan to change the default value of the 'java.security.manager'
+system property to "disallow" in the next release, i.e., Java 18. That
+will cause System::setSecurityManager to throw an
+UnsupportedOperationException in Java 18.
+
+With these changes, the process of deprecating and eventually removing
+the Security Manager will be consistent with our treatment of past
+breaking changes such as, e.g., the strong encapsulation of internal
+APIs. Maintainers of libraries and applications will be given fair
+warning before any existing code is broken."
+....
diff --git
a/netbeans.apache.org/src/content/blogs/jep-411-deprecate-the-security.adoc
b/netbeans.apache.org/src/content/blogs/jep-411-deprecate-the-security.adoc
new file mode 100644
index 000000000..23ae11448
--- /dev/null
+++ b/netbeans.apache.org/src/content/blogs/jep-411-deprecate-the-security.adoc
@@ -0,0 +1,53 @@
+//
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements. See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership. The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License. You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied. See the License for the
+// specific language governing permissions and limitations
+// under the License.
+//
+
+= JEP 411: Deprecate the Security Manager for Removal (Part 1)
+:author: Geertjan Wielenga
+:revdate: 2021-04-16
+:jbake-type: post
+:jbake-tags: blogentry
+:jbake-status: published
+:keywords: Apache NetBeans blog index
+:description: Apache NetBeans blog index
+:toc: left
+:toc-title:
+:syntax: true
+
+
+
+In
link:https://mail.openjdk.org/pipermail/security-dev/2021-April/025486.html[JEP
411, announcing the deprecation of java.lang.SecurityManager], one would hope
that the use cases for which SecurityManager exists will be replaced by more
modern APIs, before it is removed from the OpenJDK. Below is a partial list of
use cases for which the SecurityManager is used by Apache NetBeans:
+
+* *checkExit.* Ability to prevent accidental invocations of System.exit is
very important for any application that deals with other unknown libraries (as
IDEs do).
+ link:https://bugs.openjdk.java.net/browse/JDK-8199704[JDK-8199704] is filled
for this, but there is no proposal for an API yet, so it is impossible to tell
how the API will cover this use case.
+ The current API allows, for example, to partially simulate the effect of
System.exit, while it also allows to provide a user-understandable message when
a real exit is rejected.
+* *Watching file system access.* In various places, both in production code
and in tests, SecurityManager is used as a tool to receive notifications of
file reading or writing.
+ This is especially important in integration tests, to guarantee that code is
never accessing disk, unless absolutely necessary (for performance reasons,
among others).
+ In principle, the WatchService could be used for these use cases.
+ However, the WatchService is not guaranteed to work (e.g., due to OS
restrictions), it cannot detect read-only access, and requires subscription to
individual Paths. SecurityManager provides a more reliable way to monitor all
filesystem access done by Java code.
+* *Warning or prevention of use of obsolete and/or dangerous idioms.* The
SecurityManager is used to warn about the use of obsolete System properties
(via checkPropertyAccess) and the use of`sun.misc.Unsafe unsupported APIs via
checkMemberAccess.
+* *Identifying User Application Windows.* The showWindowWithoutWarningBanner
permission is used to track which windows belong to which user's custom
application (so that they can be closed when call to `System.exit` is
intercepted).
+* *Misc.* There are also restrictions on potentially dangerous code, which are
probably less important and
link:https://mail.openjdk.java.net/pipermail/security-dev/2021-April/025495.html[are
covered by Reinier's e-mail]. There are also few (probably) obsoleted
workarounds.
+
+== Summary
+
+Apache NetBeans doesn't use java.lang.SecurityManager to guarantee security,
but rather to gain additional insight into the JVM's behavior.
+
+Without having such insights, the IDE's user experience would be severely
affected.
+
+It is to be hoped that replacement APIs are being designed and that they will
be provided for evaluation before JEP-411 is integrated.
diff --git
a/netbeans.apache.org/src/content/blogs/jep-411-deprecate-the-security1.adoc
b/netbeans.apache.org/src/content/blogs/jep-411-deprecate-the-security1.adoc
new file mode 100644
index 000000000..8e7c32d59
--- /dev/null
+++ b/netbeans.apache.org/src/content/blogs/jep-411-deprecate-the-security1.adoc
@@ -0,0 +1,53 @@
+//
+// Licensed to the Apache Software Foundation (ASF) under one
+// or more contributor license agreements. See the NOTICE file
+// distributed with this work for additional information
+// regarding copyright ownership. The ASF licenses this file
+// to you under the Apache License, Version 2.0 (the
+// "License"); you may not use this file except in compliance
+// with the License. You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing,
+// software distributed under the License is distributed on an
+// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+// KIND, either express or implied. See the License for the
+// specific language governing permissions and limitations
+// under the License.
+//
+
+= JEP 411: Deprecate the Security Manager for Removal (Part 2)
+:author: Geertjan Wielenga
+:revdate: 2021-05-24
+:jbake-type: post
+:jbake-tags: blogentry
+:jbake-status: published
+:keywords: Apache NetBeans blog index
+:description: Apache NetBeans blog index
+:toc: left
+:toc-title:
+:syntax: true
+
+
+
+Following on from xref:jep-411-deprecate-the-security.adoc[part 1 on this
topic], link:https://openjdk.java.net/jeps/411[JEP 411] has recently been
updated with a "Future Work" section, amongst other changes.
+From the Apache NetBeans perspective, this is a welcome shift in the wording
of this JEP.
+It is great that the owner and reviewers of JEP 411 recognize the special
needs of complex, multi protection domain applications, such as IDEs.
+Such applications inherently run "less trusted" code, such as 3rd party
JavaBean libraries in design time, and the ability to prevent such libraries to
"System::exit" (at least) voluntarily is essential for preventing an IDE from
unexpectedly closing.
+
+From the Apache NetBeans point of view, however, it is still very concerning
to note the sudden incompatible change in SecurityManager behavior and the
rapid pace it is proposed to be implemented.
+Deprecating SecurityManager now and giving time to the overall Java ecosystem
to adapt to such a change is acceptable, however, changing the JVM's behavior
incompatibly by requiring additional command line switches is disturbing.
+
+In particular, no existing version of Apache NetBeans is going to launch with
the JEP 411 changes.
+Unless one starts the JDK with a special property, it is not going to be
possible to use the SecurityManager.
+Specifically,
link:https://issues.apache.org/jira/browse/NETBEANS-5689[NETBEANS-5689] will
prevent the IDE from starting.
+Should a user provide the proposed "-Djava.security.manager=allow" property,
then the launch fails as well due to interaction with the Equinox framework, as
shown in
link;https://issues.apache.org/jira/browse/NETBEANS-5703[NETBEANS-5703].
+
+Let's face it, there is no known workaround. Apache NetBeans will not launch
on JDK 17, i.e., the next LTS of Java.
+
+Ideally JEP 411 would actually do what it says and deprecate only, rather than
incompatibly changing the JVM's behavior.
+The Java community should be given the next few years to adjust to the change
and release updated versions of libraries (like Equinox) that are ready for the
deprecation.
+Then applications should be updated (like NetBeans) to use such libraries.
Only then should the incompatible mode be turned on, if at all.
+
+Should the authors of JEP 411 take their shift in understanding the special
need of IDEs & other complex multi protection domain applications seriously,
they would prevent all sudden incompatibilities related to JEP 411 when
deprecating SecurityManager.
diff --git
a/netbeans.apache.org/src/content/blogs/log4j-and-apache-netbeans.adoc
b/netbeans.apache.org/src/content/blogs/log4j-and-apache-netbeans.adoc
index 90ebc04bf..e1c07412d 100644
--- a/netbeans.apache.org/src/content/blogs/log4j-and-apache-netbeans.adoc
+++ b/netbeans.apache.org/src/content/blogs/log4j-and-apache-netbeans.adoc
@@ -18,8 +18,8 @@
//
= Log4j and Apache NetBeans
-Geertjan Wielenga
-2022-01-04
+:author: Geertjan Wielenga
+:revdate: 2022-01-04
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/netbeans-pub-hangout-in-prague.adoc
b/netbeans.apache.org/src/content/blogs/netbeans-pub-hangout-in-prague.adoc
index c9ad59013..14323a798 100644
--- a/netbeans.apache.org/src/content/blogs/netbeans-pub-hangout-in-prague.adoc
+++ b/netbeans.apache.org/src/content/blogs/netbeans-pub-hangout-in-prague.adoc
@@ -18,8 +18,8 @@
//
= NetBeans Pub Hangout in Prague
-Geertjan Wielenga
-2022-10-24
+:author: Geertjan Wielenga
+:revdate: 2022-10-24
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
diff --git
a/netbeans.apache.org/src/content/blogs/towards-fair-trade-for-foss.adoc
b/netbeans.apache.org/src/content/blogs/towards-fair-trade-for-foss.adoc
index ea0dd6259..99ec92e2f 100644
--- a/netbeans.apache.org/src/content/blogs/towards-fair-trade-for-foss.adoc
+++ b/netbeans.apache.org/src/content/blogs/towards-fair-trade-for-foss.adoc
@@ -18,8 +18,8 @@
//
= Towards Fair Trade for FOSS
-Geertjan Wielenga
-2022-12-03
+:author: Geertjan Wielenga
+:revdate: 2022-12-03
:jbake-type: post
:jbake-tags: blogentry
:jbake-status: published
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
For further information about the NetBeans mailing lists, visit:
https://cwiki.apache.org/confluence/display/NETBEANS/Mailing+lists
