Create Jan 2024 CPU release post #2570
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
✅ Deploy Preview for eclipsefdn-adoptium ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
|
New & Noteworthy Notes:
|
|
Release Notes:
|
Signed-off-by: Shelley Lambert <[email protected]>
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #2570 +/- ##
=======================================
Coverage 99.27% 99.28%
=======================================
Files 87 87
Lines 6622 6680 +58
Branches 574 582 +8
=======================================
+ Hits 6574 6632 +58
Misses 48 48 ☔ View full report in Codecov by Sentry. |
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
|
Amalgate info from https://openjdk.org/groups/vulnerability/advisories/2024-01-16 and NIST. |
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
sxa
requested changes
Jan 25, 2024
| Temurin 11 and 17 on AIX remain unavailable due to an [issue with Harfbuzz](https://bugs.openjdk.org/browse/JDK-8313643). Fortunately, an update to the version of Harfbuzz is targeted for April 2024. | ||
|
|
||
| ### Refinements to SBOM Contents | ||
| As of this release, extra details relating to Windows and Mac compiler versions are being recorded in the Software Bill of Materials (SBOM) for those platforms (details can be found in temurin-build [PR 3606](https://github.com/adoptium/temurin-build/pull/3606)). |
There was a problem hiding this comment.
Suggested change
| As of this release, extra details relating to Windows and Mac compiler versions are being recorded in the Software Bill of Materials (SBOM) for those platforms (details can be found in temurin-build [PR 3606](https://github.com/adoptium/temurin-build/pull/3606)). | |
| As of this release, extra details relating to Windows and Mac compiler versions are being recorded in the Software Bill of Materials (SBoM) for those platforms (details can be found in temurin-build [PR 3606](https://github.com/adoptium/temurin-build/pull/3606)). |
| ### AIX JDK11 and JDK17 Unavailable | ||
| Temurin 11 and 17 on AIX remain unavailable due to an [issue with Harfbuzz](https://bugs.openjdk.org/browse/JDK-8313643). Fortunately, an update to the version of Harfbuzz is targeted for April 2024. | ||
|
|
||
| ### Refinements to SBOM Contents |
There was a problem hiding this comment.
I don't think I 've seen it represented that way, always see it referenced as SBOM (including at NIST glossary).
|
|
||
| ## New and Noteworthy | ||
|
|
||
| ### Dropping Temurin ARM 32bit Linux binaries for JDK 21 and up |
There was a problem hiding this comment.
Suggested change
| ### Dropping Temurin ARM 32bit Linux binaries for JDK 21 and up | |
| ### Dropping Temurin Arm 32bit Linux binaries for JDK 21 and up |
| ## New and Noteworthy | ||
|
|
||
| ### Dropping Temurin ARM 32bit Linux binaries for JDK 21 and up | ||
| As per the Eclipse Adoptium PMC decision (minuted here), the project will not produce Temurin binaries for ARM 32bit Linux for JDK 21 and up. This decision is based on several criteria, including download statistics, level of support for the platform in the upstream OpenJDK project and interest from Adoptium Working Group members. |
There was a problem hiding this comment.
Suggested change
| As per the Eclipse Adoptium PMC decision (minuted here), the project will not produce Temurin binaries for ARM 32bit Linux for JDK 21 and up. This decision is based on several criteria, including download statistics, level of support for the platform in the upstream OpenJDK project and interest from Adoptium Working Group members. | |
| As per the Eclipse Adoptium PMC decision (minuted here), the project will not produce Temurin binaries for Arm 32-bit Linux for JDK 21 and up. This decision is based on several criteria, including download statistics, level of support for the platform in the upstream OpenJDK project and interest from Adoptium Working Group members. |
| Now that we have created pipelines that verify the Temurin binaries we produce are reproducible, we have an effective way to confirm that this 'feature' does not regress. As per Diagram X, for all primary platforms on JDK 21.0.2+13, we confirm those binaries are reproducible. | ||
|
|
||
| ### SLSA Level 3 for Majority of platforms | ||
| Since our previous release, we have been diligently been working at closing the last issues required for us to declare [SLSA Level 3 compliance for Linux and macOS Temurin binaries](https://adoptium.net/blog/2024/01/slsabuild3-temurin/). This is a lauded accomplishment for the project, though our work is on-going. Our 2024 plan sees us continue to focus on secure development best practices. |
There was a problem hiding this comment.
Suggested change
| Since our previous release, we have been diligently been working at closing the last issues required for us to declare [SLSA Level 3 compliance for Linux and macOS Temurin binaries](https://adoptium.net/blog/2024/01/slsabuild3-temurin/). This is a lauded accomplishment for the project, though our work is on-going. Our 2024 plan sees us continue to focus on secure development best practices. | |
| Since our previous release, we have been diligently been working at closing the last issues required for us to declare [SLSA Level 3 compliance for Linux and macOS Temurin binaries](https://adoptium.net/blog/2024/01/slsabuild3-temurin/). This is a lauded accomplishment for the project, though our work is ongoing. Our 2024 plan sees us continue to focus on secure development best practices. |
| As of this release, extra details relating to Windows and Mac compiler versions are being recorded in the Software Bill of Materials (SBOM) for those platforms (details can be found in temurin-build [PR 3606](https://github.com/adoptium/temurin-build/pull/3606)). | ||
|
|
||
| ### Confirmation of Reproducible Builds for JDK 21 Temurin binaries | ||
| Now that we have created pipelines that verify the Temurin binaries we produce are reproducible, we have an effective way to confirm that this 'feature' does not regress. As per Diagram X, for all primary platforms on JDK 21.0.2+13, we confirm those binaries are reproducible. |
There was a problem hiding this comment.
I presume "Diagram X" is intended to be replaced by something here?
There was a problem hiding this comment.
Yes, I will be pushing an additional file shortly and updating this reference, thanks!
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
sxa
approved these changes
Jan 25, 2024
jerboaa
approved these changes
Jan 25, 2024
|
There are some linter errors, though. |
Signed-off-by: Shelley Lambert <[email protected]>
Signed-off-by: Shelley Lambert <[email protected]>
|
Linter errors fixed, not sure I understand the CI / code cov failure or if it is specific to this PR or a general problem, |
|
Raised #2624 since CI failure appears to affect all PRs in this repo, not related to this one specifically. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description of change
Checklist
npm testpasses