Skip to content

🐛 Run JDT.LS on Java 25 in konflux image (for jdtls 1.63.0 / jsoup CVE-2026-75140) - #21

Merged
jmle merged 1 commit into
migtools:release-0.10from
jmle:mta-konflux-java25-release-0.10
Nov 9, 2026
Merged

jmle merged 1 commit into
migtools:release-0.10from
jmle:mta-konflux-java25-release-0.10

Conversation

@jmle

@jmle jmle commented Nov 6, 2026

Copy link
Copy Markdown

Bumps the konflux (production) image runtime from Java 21 to Java 25 (java-25-openjdk + maven-openjdk25).

Why: the mta-jdtls-server-base image is moving to JDT.LS 1.63.0 (to fix the bundled jsoup CVE-2026-75140, via the ocp-build-data cachi2 prefetch). JDT.LS 1.63.0 is built on Eclipse 2026-09, whose bundles require a JavaSE-25 runtime. On Java 21 the server fails OSGi resolution and aborts at LSP initialize with "An error has occurred. See the log file".

Verified on ubi10: java-25-openjdk-devel (25.0.5) and maven-openjdk25 (3.9.9) are available and mvn runs on Java 25.

Must land together with the matching ocp-build-data jdtls 1.60→1.63 prefetch bump: openshift-eng/ocp-build-data#14493

JDT.LS 1.63.0 (Eclipse 2026-09) requires a JavaSE-25 runtime. The
mta-jdtls-server-base image is bumped to jdtls 1.63.0 (for the jsoup
CVE-2026-75140 fix) via the ocp-build-data cachi2 prefetch, so the
konflux runtime must move from Java 21 to Java 25 (and maven-openjdk21
to maven-openjdk25) or the server fails OSGi resolution and aborts at
LSP initialize.

Signed-off-by: Juanma Leflet Estrada <jleflete@redhat.com>
@coderabbitai

coderabbitai Bot commented Nov 6, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: f331b131-28d7-4832-9afa-f50512bfa282

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@jmle
jmle merged commit 9d68570 into migtools:release-0.10 Nov 9, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants