b19/java
Watch
2
0
Fork
You've already forked java
 0
Code Issues Pull requests Projects Releases 14 Packages 9 Wiki Activity Actions
14 releases 16 tags
  • 0.7.0 31665040c0

    0.7.0
    All checks were successful
    published / projectfile-is-valid (push) Successful in 7s
    Details
    published / release-tag (push) Successful in 4s
    Details
    published / runner-is-ready (push) Successful in 7s
    Details
    published / source-is-compliant (push) Successful in 11s
    Details
    published / source-is-secure (push) Successful in 13s
    Details
    published / projectfile-is-ok (push) Successful in 7s
    Details
    published / documentation-passes-lint (push) Successful in 1m8s
    Details
    published / source-passes-lint (push) Successful in 53s
    Details
    published / image-is-built (temurin, 25) (push) Successful in 2m38s
    Details
    published / image-is-built (temurin, 27) (push) Successful in 2m39s
    Details
    published / image-is-built (oracle, 25) (push) Successful in 2m57s
    Details
    published / image-is-built (oracle, 27) (push) Successful in 2m58s
    Details
    published / image-is-secure (oracle, 25) (push) Successful in 31s
    Details
    published / image-is-secure (oracle, 27) (push) Successful in 28s
    Details
    published / container-is-verified (temurin, 25) (push) Successful in 1m27s
    Details
    published / container-is-verified (oracle, 25) (push) Successful in 1m37s
    Details
    published / container-is-verified (oracle, 27) (push) Successful in 1m38s
    Details
    published / container-is-verified (temurin, 27) (push) Successful in 1m32s
    Details
    published / image-is-secure (temurin, 25) (push) Successful in 25s
    Details
    published / image-is-secure (temurin, 27) (push) Successful in 26s
    Details
    published / image-is-published (oracle, 25, kiota) (push) Successful in 31s
    Details
    published / image-is-published (oracle, 27, kiota) (push) Successful in 35s
    Details
    published / image-is-published (temurin, 25, kiota) (push) Successful in 15s
    Details
    published / image-is-published (temurin, 27, kiota) (push) Successful in 13s
    Details
    published / image-is-published (oracle, 25, dockerhub) (push) Successful in 1m3s
    Details
    published / image-is-published (temurin, 25, dockerhub) (push) Successful in 40s
    Details
    published / image-is-published (oracle, 27, dockerhub) (push) Successful in 1m24s
    Details
    published / image-is-published (temurin, 27, dockerhub) (push) Successful in 49s
    Details
    published / release-is-published (push) Successful in 3s
    Details
    published / release-notes-are-published (push) Successful in 6s
    Details
    published / published (push) Successful in 0s
    Details
    Stable

    damian-buho released this 2026-10-25 01:30:29 +00:00 | 12 commits to main since this release

    Signed by damian-buho
    GPG key ID: 87B15EAD49FD22AB

    18 commits, 1 contributor, 2 days since 0.6.5.

    Upgrade notes

    • java: drop the 21 series (3ae11e6)

    • java: drop the 26 series (3343e51)

      b19/java:oracle-26 and b19/java:temurin-26 are no longer
      built or published.

    What’s new

    Compromised certificate authorities removed from the JDK truststore

    • Oracle and Temurin each ship their own cacerts, apart from the system store; it is cut from the same b19 distrust list at build time, without waiting for a JDK update.
    • Every listed fingerprint also joins the JDK blocklist, which rejects a compromised intermediate anywhere in a chain, cross-signed copies included.
    • The slim jlink export is cut the same way, and a certificate imported at startup cannot bring a blocked intermediate back.
    • B19_CA_DISTRUST adds fingerprints, and B19_CA_DISTRUST_ENABLED=false leaves the JDK store as shipped.

    Features

    • security: cut the JDK truststore from the b19 distrust list (66e8fb5)

    Bug fixes

    • deps: bump upstream to 27.0.1 (1603e68)
    • deps: bump upstream to 25.0.5 (1dfdabf)
    • deps: default the Java series to 27 (caff212)
    • upstream URLs, oracle is a bunch of morons (9811402)
    • java: rewrite the digest jlink pins for the cut blocklist (2f116ec)
    • deps: pin the Oracle JDK to its per-version archive URL (3f56065)
    • java: build the jlink test runtime under the home (dead2bc)

    Installation

    Pull the published container image:

    Pull from DockerHub — linux/amd64

    docker pull damianbuho/b19-java:0.7.0

    This release also publishes the 0.7 and 0 tags — pull the precision you want to pin.

    If the registries above are unreachable, pull from the origin instead:

    Pull from Kiota — linux/amd64

    docker pull kiota.ch/b19/java:0.7.0

    Usage

    Build on top of this image:

    FROM damianbuho/b19-java:0.7.0

    For the recommended multi-stage pattern and the build-hook system (build.d), scaffold a derivative with b19/scripts/scaffold.sh from m6e/b19.

    Image digests

    A tag can move; a digest cannot. Pull this exact build:

    docker pull docker.io/damianbuho/b19-java@sha256:19234e51076dac11c794b6594585c47af61bb39fd116bbcbfacf53b63b7037b7
docker pull kiota.ch/b19/java@sha256:19234e51076dac11c794b6594585c47af61bb39fd116bbcbfacf53b63b7037b7

    Full changes: https://kiota.ch/b19/java/compare/0.6.5...0.7.0

    Downloads