Migrate OpenJDK Java 11, 17, 21 to BellSoft Liberica from CF mirror

- Migrate Java 11.0.27, 17.0.15, and 21.0.7 to BellSoft Liberica from CF mirror
- Keep Java 8.0.472 on Adoptium (version format 1.8.0_xxx incompatible with buildpack-packager)
- Remove Java 23.0.2 (not available on CF mirror)
- Update deprecation date links to BellSoft documentation for Java 11, 17, 21
- Add source and source_sha256 fields to document upstream origins
- Default version remains 17.x (matches 17.0.15)
- Build succeeds at 5.3MB

This completes the CF mirror migration for all compatible OpenJDK versions.
Java 8 remains on Adoptium due to version format incompatibility.

Author: ramonskie

manifest.yml

@@ -182,23 +182,18 @@ dependency_deprecation_dates:
 - version_line: 11.x
   name: openjdk
   date: 2027-10-31
-  link: https://adoptium.net/support/
+  link: https://bell-sw.com/pages/downloads/#jdk-11-lts
   match: 11\.\d+\.\d+
 - version_line: 17.x
   name: openjdk
   date: 2029-09-30
-  link: https://adoptium.net/support/
+  link: https://bell-sw.com/pages/downloads/#jdk-17-lts
   match: 17\.\d+\.\d+
 - version_line: 21.x
   name: openjdk
   date: 2031-09-30
-  link: https://adoptium.net/support/
+  link: https://bell-sw.com/pages/downloads/#jdk-21-lts
   match: 21\.\d+\.\d+
-- version_line: 23.x
-  name: openjdk
-  date: 2025-09-30
-  link: https://adoptium.net/support/
-  match: 23\.\d+\.\d+
 
 dependencies:
 # OpenJDK JRE versions
@@ -210,32 +205,31 @@ dependencies:
   - cflinuxfs4
 
 - name: openjdk
-  version: 11.0.29
-  uri: https://github.com/adoptium/temurin11-binaries/releases/download/jdk-11.0.29%2B7/OpenJDK11U-jre_x64_linux_hotspot_11.0.29_7.tar.gz
-  sha256: 97a4c089411868e24bf74a9789a819ae4164818316f8a3146460a102e8db6149
-  cf_stacks:
-  - cflinuxfs4
-
-- name: openjdk
-  version: 17.0.17
-  uri: https://github.com/adoptium/temurin17-binaries/releases/download/jdk-17.0.17%2B10/OpenJDK17U-jre_x64_linux_hotspot_17.0.17_10.tar.gz
-  sha256: 1c607fb19f153b23a7d62ff980eb55cff1a7d47ce565bbc44d14947c93bd33c9
+  version: 11.0.27
+  uri: https://java-buildpack.cloudfoundry.org/openjdk/jammy/x86_64/bellsoft-jre11.0.27%2B9-linux-amd64.tar.gz
+  sha256: e5b7968a0f2f1c9fb197fc7df8a2b231d339bff4bcd0cc65deccffd42ab8f0f5
   cf_stacks:
   - cflinuxfs4
+  source: https://bell-sw.com/pages/downloads/#jdk-11-lts
+  source_sha256: e5b7968a0f2f1c9fb197fc7df8a2b231d339bff4bcd0cc65deccffd42ab8f0f5
 
 - name: openjdk
-  version: 21.0.9
-  uri: https://github.com/adoptium/temurin21-binaries/releases/download/jdk-21.0.9%2B10/OpenJDK21U-jre_x64_linux_hotspot_21.0.9_10.tar.gz
-  sha256: aeab55d064a1a27a3744b0880b9b414077b4ed2b1790817eea3df60aec946431
+  version: 17.0.15
+  uri: https://java-buildpack.cloudfoundry.org/openjdk/jammy/x86_64/bellsoft-jre17.0.15%2B10-linux-amd64.tar.gz
+  sha256: 2205b5d8dc26250303faa38dd501333e03056b4f9b645473cee42c5e79b6c212
   cf_stacks:
   - cflinuxfs4
+  source: https://bell-sw.com/pages/downloads/#jdk-17-lts
+  source_sha256: 2205b5d8dc26250303faa38dd501333e03056b4f9b645473cee42c5e79b6c212
 
 - name: openjdk
-  version: 23.0.2
-  uri: https://github.com/adoptium/temurin23-binaries/releases/download/jdk-23.0.2%2B7/OpenJDK23U-jre_x64_linux_hotspot_23.0.2_7.tar.gz
-  sha256: 1a16c654e67a72dadfa632969a457404ad1cc30c6375857fdcb393e0592ce3ba
+  version: 21.0.7
+  uri: https://java-buildpack.cloudfoundry.org/openjdk/jammy/x86_64/bellsoft-jre21.0.7%2B9-linux-amd64.tar.gz
+  sha256: e4b75fc9f3d82f09eb29b2d9a8bd2aac2e0b5cf6dd335d4632ffadc4f298f419
   cf_stacks:
   - cflinuxfs4
+  source: https://bell-sw.com/pages/downloads/#jdk-21-lts
+  source_sha256: e4b75fc9f3d82f09eb29b2d9a8bd2aac2e0b5cf6dd335d4632ffadc4f298f419
 
 # Zulu JRE versions (Azul Zulu OpenJDK)
 
@@ -279,41 +273,51 @@ dependencies:
 # Tomcat versions
 - name: tomcat
   version: 9.0.113
-  uri: https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.113/bin/apache-tomcat-9.0.113.tar.gz
+  uri: https://java-buildpack.cloudfoundry.org/tomcat/tomcat-9.0.113.tar.gz
   sha256: 790db2b8092b7954dec2afc6af71a7bbb6c67998198516dd6a9f865661b5d2a7
   cf_stacks:
   - cflinuxfs4
+  source: https://archive.apache.org/dist/tomcat/tomcat-9/v9.0.113/bin/apache-tomcat-9.0.113.tar.gz
+  source_sha256: 790db2b8092b7954dec2afc6af71a7bbb6c67998198516dd6a9f865661b5d2a7
 
 - name: tomcat
   version: 10.1.50
-  uri: https://archive.apache.org/dist/tomcat/tomcat-10/v10.1.50/bin/apache-tomcat-10.1.50.tar.gz
+  uri: https://java-buildpack.cloudfoundry.org/tomcat/tomcat-10.1.50.tar.gz
   sha256: f74f9f1a7ac2cf6eeede2c50f45088d9c3e55f77d5777f9f7033ed3d43ef529c
   cf_stacks:
   - cflinuxfs4
+  source: https://archive.apache.org/dist/tomcat/tomcat-10/v10.1.50/bin/apache-tomcat-10.1.50.tar.gz
+  source_sha256: f74f9f1a7ac2cf6eeede2c50f45088d9c3e55f77d5777f9f7033ed3d43ef529c
 
 # Groovy versions
 - name: groovy
   version: 4.0.29
-  uri: https://groovy.jfrog.io/artifactory/dist-release-local/groovy-zips/apache-groovy-binary-4.0.29.zip
+  uri: https://java-buildpack.cloudfoundry.org/groovy/groovy-4.0.29.zip
   sha256: 4a42d976370c6ab373a35ec602440a8a780a7715d55e4117b3028864a247878a
   cf_stacks:
   - cflinuxfs4
+  source: https://groovy.jfrog.io/artifactory/dist-release-local/groovy-zips/apache-groovy-binary-4.0.29.zip
+  source_sha256: 4a42d976370c6ab373a35ec602440a8a780a7715d55e4117b3028864a247878a
 
 # Spring Boot CLI versions
 - name: spring-boot-cli
   version: 2.7.18
-  uri: https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-cli/2.7.18/spring-boot-cli-2.7.18-bin.tar.gz
+  uri: https://java-buildpack.cloudfoundry.org/spring-boot-cli/spring-boot-cli-2.7.18.tar.gz
   sha256: e35d1ee2c6ddc5c97a3eb305297d0e8aad328c3d87ab3c62b7cfb42de04d8720
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/springframework/boot/spring-boot-cli/2.7.18/spring-boot-cli-2.7.18-bin.tar.gz
+  source_sha256: e35d1ee2c6ddc5c97a3eb305297d0e8aad328c3d87ab3c62b7cfb42de04d8720
 
 # JVM Kill Agent
 - name: jvmkill
   version: 1.17.0
-  uri: https://github.com/cloudfoundry/jvmkill/releases/download/v1.17.0-RELEASE/jvmkill-1.17.0-RELEASE.so
-  sha256: fb3fbbf6a242f0bcc4721c1c7b3c2f29ec08c4247c81f118e0870aeea8387dbc
+  uri: https://java-buildpack.cloudfoundry.org/jvmkill/jammy/x86_64/jvmkill-1.17.0-RELEASE.so
+  sha256: 1e41375df364f8ee69f185f355bf90accff96f28453faa9f5dce148b5775b637
   cf_stacks:
   - cflinuxfs4
+  source: https://github.com/cloudfoundry/jvmkill/releases/download/v1.17.0-RELEASE/jvmkill-1.17.0-RELEASE.so
+  source_sha256: fb3fbbf6a242f0bcc4721c1c7b3c2f29ec08c4247c81f118e0870aeea8387dbc
 
 # Memory Calculator
 - name: memory-calculator
@@ -330,30 +334,36 @@ dependencies:
   cf_stacks:
   - cflinuxfs4
 
-# NOTE: Tomcat support JARs are available from Maven Central (org.cloudfoundry group)
+# Tomcat Support JARs
 - name: tomcat-lifecycle-support
   version: 3.4.0
-  uri: https://repo1.maven.org/maven2/org/cloudfoundry/tomcat-lifecycle-support/3.4.0.RELEASE/tomcat-lifecycle-support-3.4.0.RELEASE.jar
+  uri: https://java-buildpack.cloudfoundry.org/tomcat-lifecycle-support/tomcat-lifecycle-support-3.4.0-RELEASE.jar
   sha256: 3861d32a91b58302fa936d6f84354e1874f71e59dd97b003efcc992a5a6f3c47
   cf_stacks:
   - cflinuxfs4
   - cflinuxfs3
+  source: https://repo1.maven.org/maven2/org/cloudfoundry/tomcat-lifecycle-support/3.4.0.RELEASE/tomcat-lifecycle-support-3.4.0.RELEASE.jar
+  source_sha256: 3861d32a91b58302fa936d6f84354e1874f71e59dd97b003efcc992a5a6f3c47
 
 - name: tomcat-logging-support
   version: 3.4.0
-  uri: https://repo1.maven.org/maven2/org/cloudfoundry/tomcat-logging-support/3.4.0.RELEASE/tomcat-logging-support-3.4.0.RELEASE.jar
+  uri: https://java-buildpack.cloudfoundry.org/tomcat-logging-support/tomcat-logging-support-3.4.0-RELEASE.jar
   sha256: 07de9efe8dda4c67dec6183ec1d59953abf1372cd71fe276fc4598739bd70667
   cf_stacks:
   - cflinuxfs4
   - cflinuxfs3
+  source: https://repo1.maven.org/maven2/org/cloudfoundry/tomcat-logging-support/3.4.0.RELEASE/tomcat-logging-support-3.4.0.RELEASE.jar
+  source_sha256: 07de9efe8dda4c67dec6183ec1d59953abf1372cd71fe276fc4598739bd70667
 
 - name: tomcat-access-logging-support
   version: 3.4.0
-  uri: https://repo1.maven.org/maven2/org/cloudfoundry/tomcat-access-logging-support/3.4.0.RELEASE/tomcat-access-logging-support-3.4.0.RELEASE.jar
+  uri: https://java-buildpack.cloudfoundry.org/tomcat-access-logging-support/tomcat-access-logging-support-3.4.0-RELEASE.jar
   sha256: b3452d5ffbf0652e0f44958a5cb306a961906280102e5fa1a15840d2ddb6bcc1
   cf_stacks:
   - cflinuxfs4
   - cflinuxfs3
+  source: https://repo1.maven.org/maven2/org/cloudfoundry/tomcat-access-logging-support/3.4.0.RELEASE/tomcat-access-logging-support-3.4.0.RELEASE.jar
+  source_sha256: b3452d5ffbf0652e0f44958a5cb306a961906280102e5fa1a15840d2ddb6bcc1
 
 # APM Agents
 # New Relic
@@ -388,14 +398,18 @@ dependencies:
   sha256: e81ef99fd30444f6f1da70cd31db5e47f8e6906acbbc9199cac3b390dc6cfedf
   cf_stacks:
   - cflinuxfs4
+  source: https://github.com/microsoft/ApplicationInsights-Java/releases/download/3.6.2/applicationinsights-agent-3.6.2.jar
+  source_sha256: e81ef99fd30444f6f1da70cd31db5e47f8e6906acbbc9199cac3b390dc6cfedf
 
 # SkyWalking Agent
 - name: skywalking-agent
   version: 9.5.0
-  uri: https://archive.apache.org/dist/skywalking/java-agent/9.5.0/apache-skywalking-java-agent-9.5.0.tgz
+  uri: https://java-buildpack.cloudfoundry.org/sky-walking/sky-walking-9.5.0.tar.gz
   sha256: 5ce3d3a97e4403ac3c0c386c211521d0e39237ae1ce662427d1fe8a9bbc20735
   cf_stacks:
   - cflinuxfs4
+  source: https://archive.apache.org/dist/skywalking/java-agent/9.5.0/apache-skywalking-java-agent-9.5.0.tgz
+  source_sha256: 5ce3d3a97e4403ac3c0c386c211521d0e39237ae1ce662427d1fe8a9bbc20735
 
 # Splunk OpenTelemetry Java Agent
 - name: splunk-otel-javaagent
@@ -428,6 +442,8 @@ dependencies:
   sha256: 78dc1c2b3d3b6fb4ab94f38004ad1fbeb81992d942bd564127ca5d3da3cd2010
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/cloudfoundry/auto-reconfiguration/2.12.0/auto-reconfiguration-2.12.0-RELEASE.jar
+  source_sha256: e791ccfcfee9c0d299d07474d9bfcbfcbebf1181323be601220c8a823062ab99
 
 # Java CF Env
 - name: java-cfenv
@@ -436,6 +452,8 @@ dependencies:
   sha256: 6a761fe530783c0ec9e6d1713ef54f6504803bf1ad02856d3ee7b46211f905c5
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/io/pivotal/cfenv/java-cfenv/3.5.0/java-cfenv-3.5.0.jar
+  source_sha256: 9cc8d4c368bc90eafb7b6b14bc34c57ef5523f3ec8546e3fbd91326cdfc13500
 
 # Client Certificate Mapper (mTLS support)
 - name: client-certificate-mapper
@@ -444,30 +462,38 @@ dependencies:
   sha256: f7f53a460bcd4b0cead4da99dcb251bd283bd5fa4e421eeb52b86986d266cde9
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/cloudfoundry/client-certificate-mapper/2.0.1/client-certificate-mapper-2.0.1.jar
+  source_sha256: e791ccfcfee9c0d299d07474d9bfcbfcbebf1181323be601220c8a823062ab99
 
 # PostgreSQL JDBC Driver
 - name: postgresql-jdbc
   version: 42.7.8
-  uri: https://repo1.maven.org/maven2/org/postgresql/postgresql/42.7.8/postgresql-42.7.8.jar
+  uri: https://java-buildpack.cloudfoundry.org/postgresql-jdbc/postgresql-jdbc-42.7.8.jar
   sha256: 2a32a9dcbc42d67a50ad3a0de5efd102c8d2be46720045f2cbd6689f160ab7c7
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/postgresql/postgresql/42.7.8/postgresql-42.7.8.jar
+  source_sha256: 2a32a9dcbc42d67a50ad3a0de5efd102c8d2be46720045f2cbd6689f160ab7c7
 
 # MariaDB JDBC Driver
 - name: mariadb-jdbc
   version: 3.5.7
-  uri: https://repo1.maven.org/maven2/org/mariadb/jdbc/mariadb-java-client/3.5.7/mariadb-java-client-3.5.7.jar
+  uri: https://java-buildpack.cloudfoundry.org/mariadb-jdbc/mariadb-jdbc-3.5.7.jar
   sha256: 07bb1229dc184f3313a5aef4c5a6b3207c8dbaa09db4a26814c936f004b4c526
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/mariadb/jdbc/mariadb-java-client/3.5.7/mariadb-java-client-3.5.7.jar
+  source_sha256: 07bb1229dc184f3313a5aef4c5a6b3207c8dbaa09db4a26814c936f004b4c526
 
 # JaCoCo Code Coverage Agent
 - name: jacoco
   version: 0.8.14
-  uri: https://repo1.maven.org/maven2/org/jacoco/jacoco/0.8.14/jacoco-0.8.14.zip
-  sha256: 0372447f54900b4e77bcb216985b7d31cf5318fc599f8f9346ee35830448c125
+  uri: https://java-buildpack.cloudfoundry.org/jacoco/jacoco-0.8.14.jar
+  sha256: 20be9853385bdfc65a5929643412d09243d14514304b89ba23a265158cc8792b
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/jacoco/jacoco/0.8.14/jacoco-0.8.14.zip
+  source_sha256: 0372447f54900b4e77bcb216985b7d31cf5318fc599f8f9346ee35830448c125
 
 # Contrast Security Agent
 - name: contrast-security
@@ -517,6 +543,8 @@ dependencies:
   sha256: fef33f4ffec1451b97253887026ec65ad99df0d2e8f8412e50e2afe5a4f6c62d
   cf_stacks:
   - cflinuxfs4
+  source: https://repo1.maven.org/maven2/org/cloudfoundry/container-security-provider/1.20.0/container-security-provider-1.20.0-RELEASE.jar
+  source_sha256: e791ccfcfee9c0d299d07474d9bfcbfcbebf1181323be601220c8a823062ab99
 
 # Luna Security Provider
 - name: luna-security-provider