Hi Arnout, That would be possible in terms of JRE alone, but Java 11 cannot drive Spring 6 that we have to use. We cannot rely on Spring 5 anymore, because of outstanding security vulnerabilities. Could you please share what the remediation plan is for Geode against all the Spring 5 security vulnerabilities?
Best regards, Jinwoo Hwang (he/him/his) SAS® Research and Development http://JinwooHwang.com<http://jinwoohwang.com/> From: Arnout Engelen <enge...@apache.org> Date: Tuesday, March 18, 2025 at 4:40 AM To: dev@geode.apache.org <dev@geode.apache.org> Subject: Re: Dev branch for Java 21 and Jakarta support EXTERNAL On Mon, Mar 17, 2025 at 1:20 PM Jinwoo Hwang <jinwoo.hw...@sas.com.invalid> wrote: > At SAS, we would need two separate Geode builds for Java 11 and Java 21 > because we still have products with Java 11. So, removing the support of > Java 11 is not feasible for our business situation in a foreseeable future. > Any suggestions would be greatly appreciated. Thank you. Would it be possible to create a Java 11 release that also works on nodes running Java 21? Kind regard, Arnout > From: Sai Boorlagadda <sai.boorlaga...@gmail.com> > Date: Friday, March 14, 2025 at 11:48 PM > To: dev@geode.apache.org <dev@geode.apache.org> > Subject: Re: Dev branch for Java 21 and Jakarta support > EXTERNAL > > Hi Jinwoo, > > Appreciate your support. I am excited to bring Java21/Jakarta to Geode. You > can always create a branch and make changes related to Java21/Jakarta on a > feature branch and then when it is ready we can merge to develop. The prior > process followed so far is git-flow process and versioning/branching is > described here > > We can continue to keep the feature branches as long as we are ready to > merge them to develop and then we can cut a release from develop. > > From your question, I am assuming you are suggesting Geode to ship > different versions based on java versions? If so, at this point with the > current community it is not sustainable to ship multiple releases. I would > rather work on Java21/jakarta support and bring it into a release and we > can discuss if it needs a major release based on the level of changes that > are involved. > > I am open to other perspectives. > > Sai > > > On Fri, 14 Mar 2025 at 04:18, Jinwoo Hwang <jinwoo.hw...@sas.com.invalid> > wrote: > > > Hello, > > > > I plan to submit a pull request for supporting Java 21 and Jakarta. Could > > you please let me know whether I should submit it based off of the > develop > > branch? Or, Are you going to create a branch? I would conceive that we > > would need separate branches for supporting Java 21/Jakarta and Java 8. > > > > Best regards, > > Jinwoo Hwang (he/him/his) > > > > SAS® Research and Development > > > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7Cc3127b687b8c4476c98608dd65f89598%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638778840538481708%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=rMGm2FhCNTFk8Jw51Hrwzuo3i0Fvn6giGotpCcCqpuE%3D&reserved=0<https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4> > < > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fjinwoohwang.com%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6Nzo2Nzc1OjI1NTJlY2RhNzM2MmRlMmJjYTg3NThhOTJkYTZhN2Q2ODVjZDk2Njc2OTczYzUwYmJkNWRiODhiMDlkM2EzZjU6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7Cc3127b687b8c4476c98608dd65f89598%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638778840538495123%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Z5D6LZbgPB9bmfuvJUulnL5gTyFHfFezYpIzZy0U67w%3D&reserved=0<https://protect.checkpoint.com/v2/r01/___http://jinwoohwang.com/___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6Nzo2Nzc1OjI1NTJlY2RhNzM2MmRlMmJjYTg3NThhOTJkYTZhN2Q2ODVjZDk2Njc2OTczYzUwYmJkNWRiODhiMDlkM2EzZjU6cDpUOk4> > >< > https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7Cc3127b687b8c4476c98608dd65f89598%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638778840538507385%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ylNS%2FpQuvt8XQVKDCBQqdb0k48k74dXSB3PFPY9p4FA%3D&reserved=0<https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4> > > > > > > > -- Arnout Engelen ASF Security Response Apache Pekko PMC member, ASF Member NixOS Committer Independent Open Source consultant
