January 2025 release blog post

[Haroon-Khel]

Issue for Jan 2025 release blog post

[Haroon-Khel]

JSF signing for SBOMs was implemented for this release

[smlambert]

Better automation / major overhaul in how we deliver Linux installers was also introduced in this release. Some re-publishing was required, for those wondering why the multiple releases in artifactory. Can refer to the EPIC for details of the work. (Perhaps get @steelhead31 input on this section of the blog post).

[steelhead31]

If it will wait a day or two until I'm back I'll write something suitable. The republishes were largely due to bugs in the automation, not signing packages properly in the base release and the 2nd republish was to fix a broken dependency and the third an issue with the default installation path.

[sxa]

Also worth mention that we are now SLSA level 3 compliant on all Windows platforms (previously we only had it on Linux and macos - but windows/x64 was the remaining primary).

[steelhead31]

@Haroon-Khel / @smlambert / @sxa Some text for the blog post, should you need to do this whilst I'm unwell.. feel free to edit and improve the below, but it sums up the changes in the release.

Linux Installation Packages (https://adoptium.net/en-GB/installation/linux/)

In previous release cycles, the .deb, .rpm & .apk Linux installer packages have not been produced until all versions and all platform architectures have been completely tested.

As of this release cycle new automation has been put in place, which allows the Linux packages to be built and uploaded to https://packages.adoptium.net/ at the same time, as the release tarballs are published to GitHub.

There were a few initial teething problems with this process, which have been identified and rectified, which resulted in (3 package respins of JDK8), however the process of the production and release of these artifacts has been massively improved.

Future improvements will be made, and we welcome any feed back as we look to improve this element further.

[sxa]

For the purposes of the release blog I'd keep it simpler than that, although we could have a separate blog post talking about the installer improvements :-) I'd suggest this (based on what you had above)

Linux installation packages improvements

The process for generating our Linux packages (available using these instructions) has been significantly improved in this release. During previous release cycles, the .deb, .rpm & .apk installer packages have not been produced until all architectures for each of the in-support Temurin versions have been completely tested and shipped as .tar.gz files.

As of this release cycle new automation has been put in place which allows the Linux packages to be built and published at the same time as the release tarballs are published to GitHub, so they will be available much sooner than before.

[steelhead31]

Thanks @sxa , that sounds like a good plan, and I like the idea of doing a blog post.

[smlambert]

@gdams also mentioned some notable news relating to Docker images