Re: Dev branch for Java 21 and Jakarta support

2025-03-18 Thread Jinwoo Hwang 
Hi Arnout,

That would be possible in terms of JRE alone, but Java 11 cannot drive Spring 6 
that we have to use.
We cannot rely on Spring 5 anymore,  because of outstanding security 
vulnerabilities.
Could you please share what the remediation plan is for Geode against all the 
Spring 5 security vulnerabilities?

Best regards,
Jinwoo Hwang (he/him/his)

SAS® Research and Development
http://JinwooHwang.com


From: Arnout Engelen 
Date: Tuesday, March 18, 2025 at 4:40 AM
To: dev@geode.apache.org 
Subject: Re: Dev branch for Java 21 and Jakarta support
EXTERNAL

On Mon, Mar 17, 2025 at 1:20 PM Jinwoo Hwang 
wrote:

> At SAS, we would need two separate Geode builds for Java 11 and Java 21
> because we still have products with Java 11. So, removing the support of
> Java 11 is not feasible for our business situation in a foreseeable future.
> Any suggestions would be greatly appreciated. Thank you.


Would it be possible to create a Java 11 release that also works on nodes
running Java 21?


Kind regard,

Arnout


> From: Sai Boorlagadda 
> Date: Friday, March 14, 2025 at 11:48 PM
> To: dev@geode.apache.org 
> Subject: Re: Dev branch for Java 21 and Jakarta support
> EXTERNAL
>
> Hi Jinwoo,
>
> Appreciate your support. I am excited to bring Java21/Jakarta to Geode. You
> can always create a branch and make changes related to Java21/Jakarta on a
> feature branch and then when it is ready we can merge to develop. The prior
> process followed so far is git-flow process and versioning/branching is
> described here
>
> We can continue to keep the feature branches as long as we are ready to
> merge them to develop and then we can cut a release from develop.
>
> From your question, I am assuming you are suggesting Geode to ship
> different versions based on java versions? If so, at this point with the
> current community it is not sustainable to ship multiple releases. I would
> rather work on Java21/jakarta support and bring it into a release and we
> can discuss if it needs a major release based on the level of changes that
> are involved.
>
> I am open to other perspectives.
>
> Sai
>
>
> On Fri, 14 Mar 2025 at 04:18, Jinwoo Hwang 
> wrote:
>
> > Hello,
> >
> > I plan to submit a pull request for supporting Java 21 and Jakarta. Could
> > you please let me know whether I should submit it based off of the
> develop
> > branch? Or, Are you going to create a branch? I would conceive that we
> > would need separate branches for supporting Java 21/Jakarta and Java 8.
> >
> > Best regards,
> > Jinwoo Hwang (he/him/his)
> >
> > SAS® Research and Development
> >
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7Cc3127b687b8c4476c98608dd65f89598%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638778840538481708%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=rMGm2FhCNTFk8Jw51Hrwzuo3i0Fvn6giGotpCcCqpuE%3D&reserved=0
> <
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fjinwoohwang.com%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6Nzo2Nzc1OjI1NTJlY2RhNzM2MmRlMmJjYTg3NThhOTJkYTZhN2Q2ODVjZDk2Njc2OTczYzUwYmJkNWRiODhiMDlkM2EzZjU6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7Cc3127b687b8c4476c98608dd65f89598%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638778840538495123%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=Z5D6LZbgPB9bmfuvJUulnL5gTyFHfFezYpIzZy0U67w%3D&reserved=0
> ><
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7Cc3127b687b8c4476c98608dd65f89598%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638778840538507385%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=yl

Re: Dev branch for Java 21 and Jakarta support

2025-03-18 Thread Calvin Kirs 
On Tue, Mar 18, 2025 at 4:40 PM Arnout Engelen  wrote:

> On Mon, Mar 17, 2025 at 1:20 PM Jinwoo Hwang  >
> wrote:
>
> > At SAS, we would need two separate Geode builds for Java 11 and Java 21
> > because we still have products with Java 11. So, removing the support of
> > Java 11 is not feasible for our business situation in a foreseeable
> future.
> > Any suggestions would be greatly appreciated. Thank you.
>
>
> Would it be possible to create a Java 11 release that also works on nodes
> running Java 21?
>

The changes in the Jakarta API might make the implementation a bit
challenging.
We may need to consolidate all code that directly interacts with the
Jakarta API into a single module and then dynamically compile the
appropriate version based on the JDK. This will be done in a separate
branch. anyway, let's leave the final decision to the community.

>
>
> Kind regard,
>
> Arnout
>
>
> > From: Sai Boorlagadda 
> > Date: Friday, March 14, 2025 at 11:48 PM
> > To: dev@geode.apache.org 
> > Subject: Re: Dev branch for Java 21 and Jakarta support
> > EXTERNAL
> >
> > Hi Jinwoo,
> >
> > Appreciate your support. I am excited to bring Java21/Jakarta to Geode.
> You
> > can always create a branch and make changes related to Java21/Jakarta on
> a
> > feature branch and then when it is ready we can merge to develop. The
> prior
> > process followed so far is git-flow process and versioning/branching is
> > described here
> >
> > We can continue to keep the feature branches as long as we are ready to
> > merge them to develop and then we can cut a release from develop.
> >
> > From your question, I am assuming you are suggesting Geode to ship
> > different versions based on java versions? If so, at this point with the
> > current community it is not sustainable to ship multiple releases. I
> would
> > rather work on Java21/jakarta support and bring it into a release and we
> > can discuss if it needs a major release based on the level of changes
> that
> > are involved.
> >
> > I am open to other perspectives.
> >
> > Sai
> >
> >
> > On Fri, 14 Mar 2025 at 04:18, Jinwoo Hwang  >
> > wrote:
> >
> > > Hello,
> > >
> > > I plan to submit a pull request for supporting Java 21 and Jakarta.
> Could
> > > you please let me know whether I should submit it based off of the
> > develop
> > > branch? Or, Are you going to create a branch? I would conceive that we
> > > would need separate branches for supporting Java 21/Jakarta and Java 8.
> > >
> > > Best regards,
> > > Jinwoo Hwang (he/him/his)
> > >
> > > SAS® Research and Development
> > >
> >
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C528ceb8873334375448a08dd637434ca%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638776072950166527%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ATm6MXoXLnPkpxTdGF4W379R1WpUBksyhswDdlr88PI%3D&reserved=0
> > <
> >
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fjinwoohwang.com%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6Nzo2Nzc1OjI1NTJlY2RhNzM2MmRlMmJjYTg3NThhOTJkYTZhN2Q2ODVjZDk2Njc2OTczYzUwYmJkNWRiODhiMDlkM2EzZjU6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C528ceb8873334375448a08dd637434ca%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638776072950178778%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=A9EHJIFSLIA5b39CSO4qfytVUtUB5EAs21tWWjDVZno%3D&reserved=0
> > ><
> >
> https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4
> > >
> > >
> > >
> >
>
>
> --
> Arnout Engelen
> ASF Security Response
> Apache Pekko PMC member, ASF Member
> NixOS Committer
> Independent Open Source consultant
>


-- 
Best wishes！
CalvinKirs

Re: Dev branch for Java 21 and Jakarta support

2025-03-18 Thread Arnout Engelen 
On Mon, Mar 17, 2025 at 1:20 PM Jinwoo Hwang 
wrote:

> At SAS, we would need two separate Geode builds for Java 11 and Java 21
> because we still have products with Java 11. So, removing the support of
> Java 11 is not feasible for our business situation in a foreseeable future.
> Any suggestions would be greatly appreciated. Thank you.


Would it be possible to create a Java 11 release that also works on nodes
running Java 21?


Kind regard,

Arnout


> From: Sai Boorlagadda 
> Date: Friday, March 14, 2025 at 11:48 PM
> To: dev@geode.apache.org 
> Subject: Re: Dev branch for Java 21 and Jakarta support
> EXTERNAL
>
> Hi Jinwoo,
>
> Appreciate your support. I am excited to bring Java21/Jakarta to Geode. You
> can always create a branch and make changes related to Java21/Jakarta on a
> feature branch and then when it is ready we can merge to develop. The prior
> process followed so far is git-flow process and versioning/branching is
> described here
>
> We can continue to keep the feature branches as long as we are ready to
> merge them to develop and then we can cut a release from develop.
>
> From your question, I am assuming you are suggesting Geode to ship
> different versions based on java versions? If so, at this point with the
> current community it is not sustainable to ship multiple releases. I would
> rather work on Java21/jakarta support and bring it into a release and we
> can discuss if it needs a major release based on the level of changes that
> are involved.
>
> I am open to other perspectives.
>
> Sai
>
>
> On Fri, 14 Mar 2025 at 04:18, Jinwoo Hwang 
> wrote:
>
> > Hello,
> >
> > I plan to submit a pull request for supporting Java 21 and Jakarta. Could
> > you please let me know whether I should submit it based off of the
> develop
> > branch? Or, Are you going to create a branch? I would conceive that we
> > would need separate branches for supporting Java 21/Jakarta and Java 8.
> >
> > Best regards,
> > Jinwoo Hwang (he/him/his)
> >
> > SAS® Research and Development
> >
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2FJinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C528ceb8873334375448a08dd637434ca%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638776072950166527%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ATm6MXoXLnPkpxTdGF4W379R1WpUBksyhswDdlr88PI%3D&reserved=0
> <
> https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fprotect.checkpoint.com%2Fv2%2Fr01%2F___http%3A%2F%2Fjinwoohwang.com%2F___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6Nzo2Nzc1OjI1NTJlY2RhNzM2MmRlMmJjYTg3NThhOTJkYTZhN2Q2ODVjZDk2Njc2OTczYzUwYmJkNWRiODhiMDlkM2EzZjU6cDpUOk4&data=05%7C02%7CJinwoo.Hwang%40sas.com%7C528ceb8873334375448a08dd637434ca%7Cb1c14d5c362545b3a4309552373a0c2f%7C0%7C0%7C638776072950178778%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=A9EHJIFSLIA5b39CSO4qfytVUtUB5EAs21tWWjDVZno%3D&reserved=0
> ><
> https://protect.checkpoint.com/v2/r01/___http://JinwooHwang.com___.YzJ1OnNhc2luc3RpdHV0ZTpjOm86MDBkYmNlOWI1Yjg0MDQzOWI2NzQzNmQ1YjU5MTY0OGU6NzozYjU1OjFmZjI5OGVjYmFhZDk4YjcyMjNlYmFkZDJjMjgwMWI4MTVkYjFkOTFmY2JiNWEzNDFkNDMyMGJkYTlkNjVmMTI6cDpUOk4
> >
> >
> >
>


-- 
Arnout Engelen
ASF Security Response
Apache Pekko PMC member, ASF Member
NixOS Committer
Independent Open Source consultant